Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 3076-3100 di 4252 risultati

Pagina 124 di 171

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2022-49636 vlan: fix memory leak in vlan_newlink()	18-02-2026	3076
MSRC Security Update	CVE-2022-28737 There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables	18-02-2026	3077
MSRC Security Update	CVE-2025-59529 simple protocol server ignores accepts unlimited connections and logs failures without limit	18-02-2026	3078
MSRC Security Update	CVE-2023-51764 Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address allowing bypass of an SPF protection mechanism. This occurs because Postfix supports . but some other popular e-mail servers do not. To prevent attack variants (by always disallowing without ) a different solution is required such as the smtpd_forbid_bare_newline=yes option with a Postfix minimum version of 3.5.23 3.6.13 3.7.9 3.8.4 or 3.9.	18-02-2026	3079
MSRC Security Update	CVE-2024-49992 drm/stm: Avoid use-after-free issues with crtc and plane	18-02-2026	3080
MSRC Security Update	CVE-2024-25176 LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.	18-02-2026	3081
MSRC Security Update	CVE-2025-38068 crypto: lzo - Fix compression buffer overrun	18-02-2026	3082
MSRC Security Update	CVE-2025-21867 bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()	18-02-2026	3083
MSRC Security Update	CVE-2025-38158 hisi_acc_vfio_pci: fix XQE dma address error	18-02-2026	3084
MSRC Security Update	CVE-2024-47671 USB: usbtmc: prevent kernel-usb-infoleak	18-02-2026	3085
MSRC Security Update	CVE-2023-50966 erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.	18-02-2026	3086
MSRC Security Update	CVE-2024-37371 In MIT Kerberos 5 (aka krb5) before 1.21.3 an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.	18-02-2026	3087
MSRC Security Update	CVE-2025-22058 udp: Fix memory accounting leak.	18-02-2026	3088
MSRC Security Update	CVE-2024-4068 Memory Exhaustion in braces	18-02-2026	3089
MSRC Security Update	CVE-2025-27363 An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.	18-02-2026	3090
MSRC Security Update	CVE-2022-50230 arm64: set UXN on swapper page tables	18-02-2026	3091
MSRC Security Update	CVE-2025-7339 on-headers vulnerable to http response header manipulation	18-02-2026	3092
MSRC Security Update	CVE-2025-38103 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()	18-02-2026	3093
MSRC Security Update	CVE-2024-49969 drm/amd/display: Fix index out of bounds in DCN30 color transformation	18-02-2026	3094
MSRC Security Update	CVE-2023-51714 An issue was discovered in the HTTP2 implementation in Qt before 5.15.17 6.x before 6.2.11 6.3.x through 6.5.x before 6.5.4 and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.	18-02-2026	3095
MSRC Security Update	CVE-2024-56596 jfs: fix array-index-out-of-bounds in jfs_readdir	18-02-2026	3096
MSRC Security Update	CVE-2024-47739 padata: use integer wrap around to prevent deadlock on seq_nr overflow	18-02-2026	3097
MSRC Security Update	CVE-2025-21941 drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params	18-02-2026	3098
MSRC Security Update	CVE-2024-31852 LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we don't have strong objections for a CVE to be created ... It does seem that the likelihood of this miscompile enabling an exploit remains very low because the miscompile resulting in this JOP gadget is such that the function is most likely to crash on most valid inputs to the function. So if this function is covered by any testing the miscompile is most likely to be discovered before the binary is shipped to production."	18-02-2026	3099
MSRC Security Update	CVE-2024-58083 KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()	18-02-2026	3100