| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-119250 | 7.8 | A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device. | 2026-10-31 14:16:30 | 2026-10-29 19:17:21 |
| CVE-2026-119249 | 7.5 | A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information about the host device. | 2026-10-31 14:16:30 | 2026-10-29 19:17:21 |
| CVE-2024-5154 | 8.1 | A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system. | 2026-10-31 14:16:29 | 2024-06-12 09:15:19 |
| CVE-2026-99216 | 8.4 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on error/exit paths In two places, current code forces vmbus_connection.conn_state to DISCONNECTED prior to calling vmbus_disconnect | 2026-10-31 13:17:59 | 2026-10-28 11:17:43 |
| CVE-2026-99213 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handle the TCP_ESTABLISHED -> TCP_CLOSING transition on OP_RST, which can race with the connect loop. Immediately break and return 0 on | 2026-10-31 13:17:59 | 2026-10-28 11:17:42 |
| CVE-2026-99212 | 7.0 | In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure rds_rdma_cm_event_handler_cmn() hands the return value of rdma_resolve_route() straight back to the rdm | 2026-10-31 13:17:59 | 2026-10-28 11:17:42 |
| CVE-2026-99203 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer setup failure F_SETFL and FIOASYNC decide whether to invoke ->fasync() before pipe_fasync() takes pipe->mutex. Two enables of one O | 2026-10-31 13:17:59 | 2026-10-28 11:17:41 |
| CVE-2026-99185 | 8.8 | In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition in split transaction handling For a split transaction, either fw_core_handle_response() or split_transaction_timeout_callback() may manipulate th | 2026-10-31 13:17:59 | 2026-10-28 11:17:39 |
| CVE-2026-99180 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: unicode: free the map after a grace period generic_ci_d_hash() and generic_ci_d_compare() read sb->s_encoding and dereference the unicode map while a pathwalk in rcu mode holds not | 2026-10-31 13:17:58 | 2026-10-28 11:17:38 |
| CVE-2026-99177 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Fix page dirtying in sev_gmem_post_populate() set_page_dirty() requires that the caller holds some kind of lock to ensure that the page's mapping does not concurrently go | 2026-10-31 13:17:58 | 2026-10-28 11:17:38 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39839
Zapisa po stranici: