fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
CVE-2026-89785
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in r
2026-09-17 归档
今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。
← 返回归档列表SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6
CVE-2026-89784
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpc_sockaddr2uaddr() return value in
xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
CVE-2026-89783
In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6_input_addr(
fs/ntfs3: reject restart table growth beyond U16_MAX entries
CVE-2026-89782
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MA
fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
CVE-2026-89781
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_bu
net: qualcomm: rmnet: restore skb->dev on deaggregated frames
CVE-2026-89780
In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb->dev on deaggrega
fs/ntfs3: validate ef->size covers the record's name and value
CVE-2026-89779
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef->size covers the record's nam
isofs: fix out-of-bounds page array access on empty zisofs block
CVE-2026-89778
In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty
vfio/pci: clear vdev->msi_perm after freeing it on init failure
CVE-2026-89777
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on
vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes
CVE-2026-89776
In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GRO
KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
CVE-2026-89775
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VNCR
mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot
CVE-2026-88255
Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Te
mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches
CVE-2026-89186
Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and ser
synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload
CVE-2026-92247
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename o
@jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture
CVE-2026-92299
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMe
a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery
CVE-2026-92215
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.g
a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection
CVE-2026-92213
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/we
ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery
CVE-2026-92184
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of th
@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
CVE-2026-61560
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`
QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors
CVE-2026-92234
QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Res