Aggregator

CVE-2026-43097 | Linux Kernel up to 6.19.13 lib/idr.c hv_pci_probe allocation of resources (WID-SEC-2026-1385)

Vuldb Updates
1 month 1 week ago
A vulnerability has been found in Linux Kernel up to 6.19.13 and classified as critical. Affected by this issue is the function hv_pci_probe in the library lib/idr.c. Performing a manipulation results in allocation of resources. This vulnerability is cataloged as CVE-2026-43097. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.
vuldb.com

CVE-2026-43098 | Linux Kernel up to 6.6.135/6.12.82/6.18.23/6.19.13 s3fwrn82_uart_read buffer overflow (WID-SEC-2026-1385)

Vuldb Updates
1 month 1 week ago
A vulnerability was found in Linux Kernel up to 6.6.135/6.12.82/6.18.23/6.19.13 and classified as critical. This affects the function s3fwrn82_uart_read. Executing a manipulation can lead to buffer overflow. This vulnerability is registered as CVE-2026-43098. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-40974 | Vmware Spring Boot up to 4.0.5 Cassandra Auto-Configuration certificate validation (CNNVD-202604-5561)

Vuldb Updates
1 month 1 week ago
A vulnerability was found in Vmware Spring Boot up to 2.7.32/3.3.18/3.4.15/3.5.13/4.0.5. It has been declared as critical. This vulnerability affects unknown code of the component Cassandra Auto-Configuration. Executing a manipulation can lead to improper certificate validation. This vulnerability is registered as CVE-2026-40974. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-6999 | BIVOCOM TR321 21.1.1.50 Wireless Setting Network Name SSID cross site scripting (EUVD-2026-25673)

Vuldb Updates
1 month 1 week ago
A vulnerability identified as problematic has been detected in BIVOCOM TR321 21.1.1.50. Affected by this vulnerability is an unknown functionality of the component Wireless Setting. This manipulation of the argument Network Name SSID causes cross site scripting. This vulnerability is tracked as CVE-2026-6999. The attack is possible to be carried out remotely. Moreover, an exploit is present. You should upgrade the affected component.
vuldb.com

Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited

Help Net Security
1 month 1 week ago

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Review: Foundations of Cybersecurity, 2nd edition Jason Andress has refreshed his introductory security text for No Starch Press. He writes in the introduction that the term security now extends past data center servers to cloud resources, mobile devices, the Internet of Things, and AI. Foundations of Cybersecurity: A Straightforward Introduction book is aimed at newcomers to the field, network and … More →

The post Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited appeared first on Help Net Security.

Help Net Security

CVE-2026-44437 | angular angular-cli up to 19.2.24/20.3.24/21.2.8 path traversal (GHSA-69xr-m8h6-h664 / WID-SEC-2026-1541)

Vuldb Updates
1 month 1 week ago
A vulnerability classified as critical was found in angular angular-cli up to 19.2.24/20.3.24/21.2.8. This impacts an unknown function. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-44437. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-8587 | Google Chrome up to 148.0.7778.96 on macOS Extensions use after free (ID 507356 / WID-SEC-2026-1542)

Vuldb Updates
1 month 1 week ago
A vulnerability was found in Google Chrome on macOS. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Extensions. Performing a manipulation results in use after free. This vulnerability is cataloged as CVE-2026-8587. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-8584 | Google Chrome up to 148.0.7778.96 Views clickjacking (ID 498892 / WID-SEC-2026-1542)

Vuldb Updates
1 month 1 week ago
A vulnerability, which was classified as problematic, has been found in Google Chrome. The impacted element is an unknown function of the component Views. The manipulation leads to clickjacking. This vulnerability is referenced as CVE-2026-8584. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-8586 | Google Chrome up to 148.0.7778.96 Chromoting access control (ID 499154 / Nessus ID 314871)

Vuldb Updates
1 month 1 week ago
A vulnerability categorized as critical has been discovered in Google Chrome. This vulnerability affects unknown code of the component Chromoting. The manipulation results in improper access controls. This vulnerability is reported as CVE-2026-8586. The attack requires a local approach. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-8582 | Google Chrome up to 148.0.7778.96 Dawn information disclosure (ID 497594 / WID-SEC-2026-1542)

Vuldb Updates
1 month 1 week ago
A vulnerability classified as problematic was found in Google Chrome. The affected element is an unknown function of the component Dawn. Executing a manipulation can lead to information disclosure. The identification of this vulnerability is CVE-2026-8582. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-8583 | Google Chrome up to 148.0.7778.96 on Android WebXR information disclosure (ID 497975 / Nessus ID 314858)

Vuldb Updates
1 month 1 week ago
A vulnerability was found in Google Chrome on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component WebXR. Such manipulation leads to information disclosure. This vulnerability is traded as CVE-2026-8583. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-8578 | Google Chrome up to 148.0.7778.96 on Linux GPU out-of-bounds (ID 496395 / WID-SEC-2026-1542)

Vuldb Updates
1 month 1 week ago
A vulnerability, which was classified as problematic, was found in Google Chrome on Linux. Affected is an unknown function of the component GPU. The manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2026-8578. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.
vuldb.com

Managed ad