Aggregator

A vulnerability described as problematic has been identified in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard.ts of the component Scheme Handler. Such manipulation of the argument url leads to information disclosure. This vulnerability is listed as CVE-2026-17457. The attack may be performed from remote. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

Submit #862453 / VDB-383320

Submit #862452 / VDB-383319

Корпоративную активацию Windows впервые привяжут к железу.

A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL. Confiant, which detailed the campaign on July 23, 2026, said it has operated since late 2024 and impersonated TradingView, Solana, and Luno to target retail traders and

Ответ на вопрос, почему космос вообще существует, может прятаться внутри неё.

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.38/7.1.3. Affected by this vulnerability is the function ad_sigma_delta_single_conversion/ad_sd_buffer_postenable of the component iio adc ad_sigma_delta. This manipulation causes state issue. This vulnerability is tracked as CVE-2026-64501. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.33/7.0.10. Affected is the function mlx5e_xfrm_add_state of the file net/mlx5e of the component eswitch mode. The manipulation results in off-by-one. This vulnerability is identified as CVE-2026-64522. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.18.33/7.0.10. This impacts the function pinconf_pins_show of the component pinctrl. The manipulation leads to deadlock. This vulnerability is referenced as CVE-2026-64521. The attack can only be performed from a local environment. No exploit is available. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.91/6.18.33/7.0.10. This affects the function nfsd4_revoke_states of the component NFSD. Executing a manipulation can lead to infinite loop. The identification of this vulnerability is CVE-2026-64519. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.18.33/7.0.10. It has been rated as very critical. The impacted element is an unknown function of the component arm_ffa. Performing a manipulation results in buffer overflow. This vulnerability was named CVE-2026-64520. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 7.1.3. It has been declared as very critical. The affected element is the function userfaultfd_must_wait/userfaultfd_huge_must_wait of the component userfaultfd. Such manipulation leads to encoding error. This vulnerability is uniquely identified as CVE-2026-64514. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.1.3. It has been classified as very critical. Impacted is the function acpi_nfit_init of the component Nfit Core. This manipulation causes use after free. This vulnerability is handled as CVE-2026-64510. It is possible to launch the attack on the local host. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.12.96/6.18.38/7.1.3 and classified as very critical. This issue affects the function GenDiskBuilder::build of the component block. The manipulation results in memory leak. This vulnerability is known as CVE-2026-64509. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 7.2-rc2 and classified as very critical. This vulnerability affects the function rndis_rm_hdr of the component Rndis. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-64505. An attack has to be approached locally. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.2-rc2. This affects the function kxsd9_write_raw of the component kxsd9. Executing a manipulation can lead to missing release of resource. This vulnerability appears as CVE-2026-64503. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.38/7.1.3. Affected by this issue is the function ad_sigma_delta_clear_pending_event of the component Iio Adc Ad Sigma Delta. Performing a manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2026-64502. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc2. Affected by this vulnerability is the function ads1119_triggered_buffer_preenable of the component ADC. Such manipulation leads to missing release of resource. This vulnerability is documented as CVE-2026-64499. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.91/6.18.33/7.0.10. Affected is the function tcp_ao_established_key of the component Tcp Ao Established Key. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2026-64518. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.91/6.18.33/7.0.10. This impacts the function xe_gsc_init_post_hwconfig of the component GSC. The manipulation results in double free. This vulnerability is cataloged as CVE-2026-64517. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.