ConnexionCVE-2026-58640 Windows NTFS Remote Code Execution Vulnerability
21 juillet 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
Vue normale
-
MSRC Security Update Guide
- CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
21 juillet 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto
CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto
21 juillet 2026 à 10:44
Information published.
CVE-2026-63796 ocfs2: reject oversized group bitmap descriptors
21 juillet 2026 à 10:44
Information published.
CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout()
21 juillet 2026 à 10:44
Information published.
CVE-2026-63824 KEYS: fix overflow in keyctl_pkey_params_get_2()
21 juillet 2026 à 10:44
Information published.
-
- CVE-2026-3842 Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
CVE-2026-3842 Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
21 juillet 2026 à 10:42
Information published.
-
- CVE-2026-38755 A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
-
- CVE-2026-38754 A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
-
- CVE-2026-62299 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record
CVE-2026-62299 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record
21 juillet 2026 à 10:41
Information published.
-
- CVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path index
CVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path index
21 juillet 2026 à 10:41
Information published.
-
- CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location
CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location
21 juillet 2026 à 10:41
Information published.
-
- CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row
CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row
21 juillet 2026 à 10:41
Information published.
-
- CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
21 juillet 2026 à 10:41
Information published.
-
- CVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record
CVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record
21 juillet 2026 à 10:41
Information published.
-
- CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
21 juillet 2026 à 10:40
Information published.
CVE-2026-63827 apparmor: fix use-after-free in rawdata dedup loop
21 juillet 2026 à 10:39
Information published.
-
- CVE-2026-63828 apparmor: mediate the implicit connect of TCP fast open sendmsg
CVE-2026-63828 apparmor: mediate the implicit connect of TCP fast open sendmsg
21 juillet 2026 à 10:39
Information published.
-
- CVE-2026-63801 tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
CVE-2026-63801 tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
21 juillet 2026 à 10:39
Information published.
CVE-2026-42770 FFC-DH Peer Validation Uses Attacker-Supplied q
21 juillet 2026 à 10:05
Information published.
-
- CVE-2026-42769 Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
CVE-2026-42769 Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
21 juillet 2026 à 10:05
Information published.
CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() Function
21 juillet 2026 à 10:05
Information published.
-
- CVE-2026-38752 A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
-
- CVE-2026-38753 A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
-
- CVE-2026-64082 riscv: Fix register corruption from uninitialized cregs on error
CVE-2026-64082 riscv: Fix register corruption from uninitialized cregs on error
21 juillet 2026 à 10:05
Information published.
CVE-2026-64146 erofs: fix metabuf leak in inode xattr initialization
21 juillet 2026 à 10:05
Information published.
-
- CVE-2026-63974 Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close
CVE-2026-63974 Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close
21 juillet 2026 à 10:05
Information published.
-
- CVE-2026-63978 net/handshake: Drain pending requests at net namespace exit
CVE-2026-63978 net/handshake: Drain pending requests at net namespace exit
21 juillet 2026 à 10:04
Information published.
-
- CVE-2026-63999 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
CVE-2026-63999 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
21 juillet 2026 à 10:04
Information published.
CVE-2026-64017 blk-mq: pop cached request if it is usable
21 juillet 2026 à 10:04
Information published.
-
- CVE-2026-63979 net/handshake: hand off the pinned file reference to accept_doit
CVE-2026-63979 net/handshake: hand off the pinned file reference to accept_doit
21 juillet 2026 à 10:04
Information published.
-
- CVE-2026-64060 netfs: Fix leak of request in netfs_write_begin() error handling
CVE-2026-64060 netfs: Fix leak of request in netfs_write_begin() error handling
21 juillet 2026 à 10:04
Information published.
CVE-2026-64076 netfilter: bridge: eb_tables: close module init race
21 juillet 2026 à 10:04
Information published.
CVE-2026-64112 rbd: eliminate a race in lock_dwork draining on unmap
21 juillet 2026 à 10:04
Information published.
CVE-2026-63882 drm/amdkfd: fix NULL pointer bug in svm_range_set_attr
21 juillet 2026 à 10:04
Information published.
CVE-2026-64154 drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
21 juillet 2026 à 10:04
Information published.
CVE-2026-64111 lsm: hold cred_guard_mutex for lsm_set_self_attr()
21 juillet 2026 à 10:04
Information published.
CVE-2026-63879 drm/amdgpu: fix amdgpu_hmm_range_get_pages
21 juillet 2026 à 10:03
Information published.
-
- CVE-2026-63963 usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers
CVE-2026-63963 usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers
21 juillet 2026 à 10:03
Information published.
