Vuldb Updates

A vulnerability has been found in Linux Kernel up to 6.12.100/6.18.39/7.1.4 and classified as very critical. This issue affects the function nvmet_execute_auth_receive of the component nvmet-auth. Performing a manipulation results in out-of-bounds write. This vulnerability was named CVE-2026-72130. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.6.147/6.12.100/6.18.39/7.1.4. Impacted is the function rt_spin_unlock of the component Locking/RT. Performing a manipulation results in use after free. This vulnerability was named CVE-2026-72069. The attack needs to be approached locally. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.9.4. It has been rated as critical. The affected element is an unknown function of the component starfive. Performing a manipulation of the argument uses results in stack-based buffer overflow. This vulnerability is known as CVE-2024-39478. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is advised.

A vulnerability described as problematic has been identified in Linux Kernel up to 6.10.9. Affected by this issue is the function bpf_test_run. Such manipulation leads to state issue. This vulnerability is uniquely identified as CVE-2024-46754. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.14.1. This affects the function jfs_truncate_nolock. The manipulation results in stack-based buffer overflow. This vulnerability is identified as CVE-2024-58094. The attack can only be performed from the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.14.1. It has been rated as critical. This affects the function hex_dump_to_buffer of the component ibmvnic. Performing a manipulation results in buffer overflow. This vulnerability is cataloged as CVE-2025-22104. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is advised.

A vulnerability has been found in Linux Kernel up to 6.16.4/6.17-rc3 and classified as critical. Affected is an unknown function of the component mISDN. Performing a manipulation results in uninitialized pointer. This vulnerability is identified as CVE-2025-39833. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability classified as critical was found in Linux Kernel up to 6.16.7. This vulnerability affects the function j1939_sk_bind. Executing a manipulation can lead to privilege escalation. The identification of this vulnerability is CVE-2025-39925. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical was found in Linux Kernel up to 6.17.2. Impacted is the function __sk_dst_get. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2025-40168. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is advised.

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.17.2. This issue affects the function __sk_dst_get. The manipulation results in privilege escalation. This vulnerability is known as CVE-2025-40139. Access to the local network is required for this attack. No exploit is available. The affected component should be upgraded.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.57/6.17.7. This affects an unknown function. Executing a manipulation can lead to insufficiently random values. This vulnerability is registered as CVE-2025-68313. The attack requires access to the local network. No exploit is available. The affected component should be upgraded.

A vulnerability classified as critical has been found in Linux Kernel up to 6.17.2. The affected element is the function __pnet_find_base_ndev. This manipulation causes use after free. The identification of this vulnerability is CVE-2025-40064. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.4.6. It has been classified as critical. The affected element is the function hpd_irq_lock. Performing a manipulation results in privilege escalation. This vulnerability is known as CVE-2023-54263. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is recommended.

A vulnerability categorized as problematic has been discovered in Go nethttp up to 1.25.12/1.26.5. Impacted is an unknown function. The manipulation results in allocation of resources. This vulnerability is reported as CVE-2026-56853. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability has been found in Google html-template up to 1.25.12/1.26.5 and classified as problematic. This vulnerability affects unknown code. Performing a manipulation results in cross site scripting. This vulnerability is identified as CVE-2026-56858. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Google Go up to 0.55.x. This issue affects some unknown processing of the component x-net-dns-dnsmessage. Performing a manipulation results in out-of-bounds read. This vulnerability was named CVE-2026-46600. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Google Go up to 1.25.12/1.26.5. Affected by this issue is the function Unmarshal of the component encoding-asn1. This manipulation causes resource consumption. The identification of this vulnerability is CVE-2026-33818. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability categorized as critical has been discovered in JFrog Artifactory up to 7.161.19. This impacts an unknown function. Executing a manipulation can lead to improper privilege management. This vulnerability is tracked as CVE-2026-82329. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Google Chrome. The impacted element is an unknown function of the component WebGL. Performing a manipulation results in use after free. This vulnerability is known as CVE-2026-84352. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Google Chrome. This vulnerability affects unknown code of the component Browser. Executing a manipulation can lead to use after free. This vulnerability is tracked as CVE-2026-84349. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.