Export limit exceeded: 419546 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (419546 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-69025 | 2026-11-05 | N/A | ||
| In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service | ||||
| CVE-2026-122236 | 1 Openhands | 1 Openhands | 2026-11-05 | 6.3 Medium |
| A vulnerability has been found in OpenHands up to 1.24.0. This impacts an unknown function of the component Landing Page. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 1.25.0 will fix this issue. The name of the patch is c5efa3ae415def0a903c82d2b17b748e663b1995. Upgrading the affected component is recommended. | ||||
| CVE-2026-99232 | 1 Linux | 2 Linux, Linux Kernel | 2026-11-05 | 4.7 Medium |
| In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the faultable syscall buffer syscall_copy_user_array() copies the buffer argument of faultable syscalls (write, pwrite64, ...) with __copy_from_user(), which skips access_ok(). Use copy_from_user() instead so a non-user address is rejected and the entry is recorded as faulted. It could be a security concern for machines that trust perf a bit too much. | ||||
| CVE-2026-99244 | 1 Linux | 2 Linux, Linux Kernel | 2026-11-05 | 3.3 Low |
| In the Linux kernel, the following vulnerability has been resolved: pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper Since commit 7fea700e04bd ("zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING") zap_pid_ns_processes() clears TIF_NOTIFY_SIGNAL before every kernel_wait4() call. Otherwise kernel_wait4() doesn't sleep and returns -ERESTARTSYS if signal_pending() is true and the reaper busy-waits. But clearing TIF_NOTIFY_SIGNAL doesn't fix it. It can get raised again. For example, klp_send_signals() sets it raw against any task that hasn't transitioned yet. And it keeps sending it until the livepatch finishes. The sleep loop waiting for pid_allocated to drop has the same problem and it doesn't even clear anything. So a schedule() in TASK_INTERRUPTIBLE returns immediately. Use a no_notify_signal guard. signal_pending() will ignore TIF_NOTIFY_SIGNAL and the pid namespace reaper sleeps until a child exits or free_pid() wakes it. | ||||
| CVE-2026-48179 | 2026-11-05 | N/A | ||
| In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service | ||||
| CVE-2026-33958 | 2026-11-05 | N/A | ||
| Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. | ||||
| CVE-2026-33965 | 2026-11-05 | N/A | ||
| An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow. | ||||
| CVE-2026-69044 | 2026-11-05 | N/A | ||
| In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption. | ||||
| CVE-2026-69043 | 2026-11-05 | N/A | ||
| In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption | ||||
| CVE-2026-69050 | 2026-11-05 | N/A | ||
| Out-of-bounds memory access in a device driver due to improper resource state tracking. | ||||
| CVE-2026-69066 | 2026-11-05 | N/A | ||
| Memory corruption in GPU driver due to improper validation of VMID reservation. | ||||
| CVE-2026-69002 | 2026-11-05 | N/A | ||
| Incorrect authorization in Samsung framework services due to missing permission checks | ||||
| CVE-2026-69068 | 2026-11-05 | N/A | ||
| Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. | ||||
| CVE-2026-68985 | 2026-11-05 | N/A | ||
| In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service. | ||||
| CVE-2026-68984 | 2026-11-05 | N/A | ||
| In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. | ||||
| CVE-2026-48183 | 2026-11-05 | N/A | ||
| Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions | ||||
| CVE-2026-68994 | 2026-11-05 | N/A | ||
| A double free vulnerability in NPU driver due to improper pointer management (941) | ||||
| CVE-2026-48186 | 2026-11-05 | N/A | ||
| Improper handling of messages before AS security activation can cause unexpected behavior | ||||
| CVE-2026-48175 | 2026-11-05 | N/A | ||
| Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition. | ||||
| CVE-2026-35494 | 2026-11-05 | N/A | ||
| In the baseband, memory corruption during NAS packet processing can cause a denial of service. | ||||