Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap
CVE-2026-86567
Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap
#msrc
共收录 2151 条相关情报。
← 返回所有主题Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
CVE-2026-86565
Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path
CVE-2026-110602
libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path
Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
CVE-2026-86847
Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions
CVE-2026-88838
Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions
Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service
CVE-2026-88833
Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service
libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL
CVE-2026-111137
libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL
libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string
CVE-2026-111269
libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
CVE-2026-104150
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip
CVE-2026-55453
CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip
CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)
CVE-2026-55480
CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)
OpenPrinting CUPS: root-side banner file disclosure
CVE-2026-61702
OpenPrinting CUPS: root-side banner file disclosure
CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)
CVE-2026-34980 · CVE-2026-55467
CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)
Microsoft Identity Web Elevation of Privilege Vulnerability
CVE-2026-80092
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privi
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
CVE-2026-109461
Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclo
ASP.NET Core Denial of Service Vulnerability
CVE-2026-109468
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service ove
Microsoft Office Word Remote Code Execution Vulnerability
CVE-2026-108451
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-108454
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-108455
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network
Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-108453
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network