Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection
CVE-2026-78410
Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection
#windows
共收录 2159 条相关情报。
← 返回所有主题Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()
CVE-2026-84838
Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()
Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames
CVE-2026-84233
Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames
Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq
CVE-2026-0665
Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq
xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
CVE-2026-83611
xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
xmldom: Quadratic-time attribute deduplication
CVE-2026-83613
xmldom: Quadratic-time attribute deduplication
xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
CVE-2026-83610
xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser
CVE-2026-83619
xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser
NGINX ngx_http_js_module vulnerability
CVE-2026-18329
NGINX ngx_http_js_module vulnerability
NGINX ngx_http_js_module vulnerability
CVE-2026-78222
NGINX ngx_http_js_module vulnerability
NGINX ngx_http_js_module vulnerablility
CVE-2026-78689
NGINX ngx_http_js_module vulnerablility
Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
CVE-2026-56855
Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
CVE-2026-80888
drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
nfc: llcp: reject PDUs shorter than the LLCP header
CVE-2026-80798
nfc: llcp: reject PDUs shorter than the LLCP header
ext4: stop retrying saturated xattr cache entries
CVE-2026-80808
ext4: stop retrying saturated xattr cache entries
HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
CVE-2026-80772
HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
ext4: don't enable DAX on new encrypted files
CVE-2026-80806
ext4: don't enable DAX on new encrypted files
mptcp: pm: fix memory leak from alloc-during-teardown race
CVE-2026-80784
mptcp: pm: fix memory leak from alloc-during-teardown race
HID: pidff: fix OOB write when hid->inputs is empty
CVE-2026-80780
HID: pidff: fix OOB write when hid->inputs is empty
sctp: reject stale cookies with mismatched verification tags
CVE-2026-80890
sctp: reject stale cookies with mismatched verification tags