KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.
In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPT_RT syzbot is reporting KCOV state corruption on PREEMPT_RT kernels, for the temporary storage used for saving/restoring remote KCOV state is currently allocated as the…
In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetch_item() is called by hid_scan_report() on an item with HID_ITEM_TAG_LONG, it stores a pointer to the item data in item->data.longdata instead of storing a…
Błąd w jądrze Linuxa przy nieosiągalnym kontrolerze USB prowadzi do awarii systemu.
Przepełnienie bufora w rdma/rxe w jądrze Linuxa prowadzi do zapisu poza przydzieloną pamięcią.
Przepełnienie bufora w kernelu Linux w tls_append_frag umożliwia zdalne wykonanie kodu.
Błąd w jądrze Linuxa pozwala na wyścig usuwania LUN, co prowadzi do naruszenia pamięci.
Wyciek blokady w jądrze Linuxa przy otwieraniu pliku DAX umożliwia zablokowanie dalszych operacji.
Wyciek blokady w jądrze Linuxa podczas błędu zapisu w fuse umożliwia zablokowanie operacji na pliku.
In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucv_sock_recvmsg() sends the HiperSockets-only AF_IUCV_FLAG_WIN without testing the transport, so on a classic z/VM socket iucv_send_ctrl() sizes the skb through a NULL iucv->hs_dev.…
Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A use-after-free issue was addressed with improved memory management. | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| A logic issue was addressed with improved checks. | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPT_RT syzbot… | In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPT_RT syzbot is reporting KCOV state corruption on PREEMPT_RT kernels, for the temporary storage used for saving/restoring remote KCOV state is currently allocated as the… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When… | In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetch_item() is called by hid_scan_report() on an item with HID_ITEM_TAG_LONG, it stores a pointer to the item data in item->data.longdata instead of storing a… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Błąd w jądrze Linuxa przy nieosiągalnym kontrolerze USB prowadzi do awarii systemu. | Błąd w jądrze Linuxa przy nieosiągalnym kontrolerze USB prowadzi do awarii systemu. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Przepełnienie bufora w rdma/rxe w jądrze Linuxa prowadzi do zapisu poza przydzieloną pamięcią. | Przepełnienie bufora w rdma/rxe w jądrze Linuxa prowadzi do zapisu poza przydzieloną pamięcią. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Przepełnienie bufora w kernelu Linux w tls_append_frag umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w kernelu Linux w tls_append_frag umożliwia zdalne wykonanie kodu. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Błąd w jądrze Linuxa pozwala na wyścig usuwania LUN, co prowadzi do naruszenia pamięci. | Błąd w jądrze Linuxa pozwala na wyścig usuwania LUN, co prowadzi do naruszenia pamięci. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Wyciek blokady w jądrze Linuxa przy otwieraniu pliku DAX umożliwia zablokowanie dalszych operacji. | Wyciek blokady w jądrze Linuxa przy otwieraniu pliku DAX umożliwia zablokowanie dalszych operacji. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Wyciek blokady w jądrze Linuxa podczas błędu zapisu w fuse umożliwia zablokowanie operacji na pliku. | Wyciek blokady w jądrze Linuxa podczas błędu zapisu w fuse umożliwia zablokowanie operacji na pliku. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucv_sock_recvmsg() sends… | In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update iucv_sock_recvmsg() sends the HiperSockets-only AF_IUCV_FLAG_WIN without testing the transport, so on a classic z/VM socket iucv_send_ctrl() sizes the skb through a NULL iucv->hs_dev.… |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Information disclosure in the Networking: DNS component. | Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Incorrect boundary conditions in the CSS Transitions and Animations component. | Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Incorrect boundary conditions in the Layout: Text and Fonts component. | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Integer overflow in the Graphics: Text component. | Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Use-after-free in the JavaScript: GC component. | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Privilege escalation in the DOM: UI Events & Focus Handling component. | Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Incorrect boundary conditions in the WebRTC component. | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Sandbox escape due to use-after-free in the Widget component. | Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Race condition in the IPC component. | Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Information disclosure in the Networking: HTTP component. | Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Information disclosure due to race condition in the Networking component. | Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Privilege escalation in the Toolkit component. | Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Invalid pointer in the JavaScript Engine: JIT component. | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % | ||
| Use-after-free in the Graphics component. | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Do weryfikacji | Nieustalone | 0,18 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.