Lucene search
+L

399952 matches found

CVE
CVE
added 2026/09/16 8:48 a.m.13 views

CVE-2026-89777

A use-after-free vulnerability in the Linux kernel's VFIO/PCI subsystem (drivers/vfio/pci/vfio_pci_config.c) occurs when vdev->msi_perm is freed via kfree() on an init failure path but not NULLed , leaving a dangling pointer that persists across device open/close cycles. On the next vfio_confi...

8.8CVSS6.3AI score0.00159EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/16 8:39 a.m.29 views

CVE-2026-89775

CVE-2026-89775 affects the Linux kernel in the KVM arm64 subsystem. When the S1 MMU is disabled, the page-table walk level is set to −127 (S1_MMU_DISABLED), but pgshift_level_to_ttl() casts it to an unsigned 8-bit value, yielding an invalidation size of 0 during VNCR TLB evaluation. This can leav...

9.3CVSS5.8AI score0.0017EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/16 8:32 a.m.18 views

CVE-2026-73464

Arista EOS is affected via its gRPC Network Management Interface (gNMI) component. A specially crafted request from an authenticated client with gNMI access can execute arbitrary code with root privileges on the switch. The root cause is classified as CWE-94 (Code Injection) . Exploitation requir...

8.8CVSS6.6AI score0.00483EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:32 a.m.23 views

CVE-2026-85501

NLnet Labs Unbound up to and including 1.26.0 is vulnerable to a set of DNSSEC algorithmic complexity attacks collectively termed ReTrap . Four distinct vectors are identified: TagTrap (mismatched DNSKEY, RRSIG, and DS records in responses), DelegationTrap (iterative chain-of-trust validation fro...

5.3CVSS5.6AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:32 a.m.21 views

CVE-2026-82720

NLnet Labs Unbound versions 1.12.0 through 1.26.0 contain a use-after-free vulnerability in the DNS-over-HTTPs (DoH) code path when compiled with --with-libnghttp2. During failure code paths (e.g., RPZ drop query or jostle due to heavy traffic), a dropped DoH stream tears down the entire DoH sess...

5.9CVSS6AI score0.00285EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:31 a.m.23 views

CVE-2026-82717

NLnet Labs Unbound versions up to and including 1.26.0 are affected by a heap buffer overflow in CNAME synthesis during upstream response processing. When the resolver enforces a max TTL value in the packet buffer, a compression pointer pointing to the overwritten value invalidates the domain nam...

9.5CVSS6.5AI score0.00402EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:30 a.m.27 views

CVE-2026-81642

NLnet Labs Unbound (up to and including 1.26.0 ) contains a heap buffer overflow in the DNSSEC validator when digesting DNSKEY records. A DNSKEY with an owner compression pointer referencing its own RDATA can overflow the digest buffer, enabling denial of service and possible remote code executio...

10CVSS5.8AI score0.00521EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:30 a.m.19 views

CVE-2026-81634

NLnet Labs Unbound up to and including 1.26.0 is affected by a heap buffer overflow in the RRSet canonicalisation routine. The root cause is a missing first owner name in the buffer length check, which can be triggered by a 255-length query name combined with a large TCP response. Since canonical...

7.5CVSS6AI score0.00355EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:30 a.m.17 views

CVE-2026-80225

NLnetLabs Unbound versions up to and including 1.26.0 are affected by a degradation of service vulnerability in the TCP/DoT reading procedure . The root cause is the absence of a limit on consecutive reads : a remote, unauthenticated attacker who can sustain a rate of distinct uncached DNS querie...

5.3CVSS5.7AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:29 a.m.10 views

CVE-2026-78227

NLnet Labs Unbound versions 1.22.0 through 1.26.1 contain a use-after-free vulnerability in the DNS-over-QUIC (DoQ) implementation, triggered only when compiled with '--with-libngtcp2'. The root cause is that ngtcp2's retransmission buffer retains a shallow pointer into a per-stream output buffer...

6.5CVSS6.1AI score0.00267EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:29 a.m.13 views

CVE-2026-77955

NLnet Labs Unbound versions 1.13.2 through 1.26.1 are affected by a timing window in ZONEMD verification for zones configured with zonemd-check: yes located below (but not at) a trust anchor. The root cause is the asynchronous DS/DNSKEY resolution required before the ZONEMD integrity check comple...

4.4CVSS5.7AI score0.00128EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:29 a.m.15 views

CVE-2026-77860

NLnetLabs Unbound versions 1.20.0 through 1.26.0 are affected by a double-decrement flaw in the serve-expired code path that causes the per-client wait-limit counter to be decremented twice. An attacker controlling an authoritative zone with short TTLs can alternate "slow" queries (never answered...

3.7CVSS5.9AI score0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:28 a.m.13 views

CVE-2026-86338

Ash (Elixir) field_policies were intended to prevent filter-based information disclosure by nilling forbidden field references in filters. The nilling mechanism matched only Ash.Resource.* structs (attributes) but failed to match Ash.Query.Calculation and Ash.Query.Aggregate structs, so filters r...

6CVSS5.7AI score0.00321EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/16 8:24 a.m.9 views

CVE-2026-88255

CVE-2026-88255 is an improper validation of unsafe equivalence in input in ZenHive mpp (versions 0.2.0 through before 0.16.2). The root cause lies in MPP.Methods.Tempo, where the pre-broadcast dedup reserve (reserve_hash_atomic/2) keys on the caller-supplied raw hex (tx.raw) rather than a canonic...

6.3CVSS5.8AI score0.00394EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/16 8:24 a.m.12 views

CVE-2026-89774

CVE-2026-89774 is a Use-After-Free (UAF) in the Linux kernel's Bluetooth SCO subsystem, specifically in sco_conn_ready(). The socket (conn->sk) and its parent are dereferenced without holding a refcount or under conn->lock, allowing a concurrent sco_sock_release() to free the socket before ...

8.8CVSS6.1AI score0.00318EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/16 8:24 a.m.10 views

CVE-2026-89186

ZenHive mpp (Elixir plug library) is vulnerable to sensitive information disclosure via shared HTTP caches . The MPP.Plug.verify_credential plug sets cache-control: private and a Payment-Receipt header before the wrapped application executes, but registers no register_before_send/2 callback to en...

6.3CVSS5.8AI score0.00394EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/16 8:14 a.m.16 views

CVE-2026-73454

Arista EOS devices with gNSI Credentialz enabled are vulnerable to a command injection (CWE-77) that allows a network attacker with low privileges to craft a request causing unintended modifications to a target account's properties, potentially granting elevated privileges . Affected EOS releases...

8.6CVSS5.7AI score0.00296EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:09 a.m.16 views

CVE-2026-73439

CVE-2026-73439 is a policy enforcement flaw in Arista EOS affecting the gNMI (gRPC Network Management Interface) server when gNSI Pathz is configured. The root cause (CWE-842) is that gNMI fails to correctly enforce Pathz policy rules when both a group rule and a user rule target the same path, a...

7.7CVSS5.7AI score0.00332EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:01 a.m.20 views

CVE-2026-73461

CVE-2026-73461 is an incorrect privilege assignment (CWE-266) in Arista EOS affecting platforms with AAA-based gRPC authorization enabled for OpenConfig. An authenticated user's gRPC request may be processed at the wrong privilege level , causing authorization to use an incorrect AAA method list ...

9.4CVSS5.7AI score0.00298EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 7:59 a.m.17 views

CVE-2026-89207

CVE-2026-89207 affects the web interfaces of the Siemens WTV676-HB6035 (all versions < V3.94) and WTV776-HB6035 (all versions

6.9CVSS5.7AI score0.00336EPSS
SaveExploits0References1
Rows per page
Query Builder