Aggregator

原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅

Currently trending CVE - Hype Score: 12 - In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE header before calling dev_hard_header(). Device header callbacks are allowed to reallocate the skb head, ...

Currently trending CVE - Hype Score: 12 - In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request from another port to ...

Currently trending CVE - Hype Score: 12 - In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP ...

Currently trending CVE - Hype Score: 13 - In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than the number ...

Currently trending CVE - Hype Score: 14 - In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb, 0). This is intentional: at the bridge ebtables hooks ...

Currently trending CVE - Hype Score: 19 - In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different ...

Currently trending CVE - Hype Score: 18 - In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes ...

Currently trending CVE - Hype Score: 1 - An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5.  An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to ...

Currently trending CVE - Hype Score: 1 - Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain ...

Currently trending CVE - Hype Score: 1 - A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by ...

A vulnerability, which was classified as problematic, was found in Apple macOS up to 15.7/26/26.6. This affects an unknown part. The manipulation results in permission issues. This vulnerability is cataloged as CVE-2026-84559. The attack must be initiated from a local position. There is no exploit available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Apple macOS up to 15.7/26/26.6. This affects an unknown function. The manipulation results in out-of-bounds read. This vulnerability is known as CVE-2026-84565. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability labeled as problematic has been found in Apple macOS up to 26. Affected is an unknown function of the component Pasteboard. Such manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2026-84569. Local access is required to approach this attack. No exploit exists. The affected component should be upgraded.

A vulnerability classified as problematic was found in Apple macOS up to 26.5. This vulnerability affects unknown code. The manipulation results in race condition. This vulnerability is identified as CVE-2026-84562. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, has been found in Apple macOS up to 15.7/26/26.6. This issue affects some unknown processing of the component Gatekeeper. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2026-84570. The attack is restricted to local execution. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Apple macOS up to 15.7/26/26.6 and classified as problematic. The impacted element is an unknown function. Executing a manipulation can lead to information disclosure. This vulnerability is registered as CVE-2026-84573. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.