كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 8 من 8

• عاليةCVE-2026-52987درجة CVSS 7.824‏/06‏/2026

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new_addition is true, amdgpu_userq_vm_validate() calls drm_exec_fini(&exec) before iterating over the collected HMM ranges and c

  CWE-1341linux linux_kernel
• حرجةCVE-2026-45898درجة CVSS 9.827‏/05‏/2026

  In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission logic to unconditionally call queue_wor

  CWE-1341linux linux_kernel
• عاليةCVE-2026-45852درجة CVSS 7.827‏/05‏/2026

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(), the queue pointer 'q' is assigned to 'srq->rq.queue' before copying the SRQ number to user space. If copy_to_user() fails

  CWE-415CWE-1341linux linux_kernel
• عاليةCVE-2026-43494درجة CVSS 7.821‏/05‏/2026

  In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinned pages are released with put_page(), and rm->data.op_mmp_znoti

  CWE-1341linux linux_kernel
• عاليةCVE-2026-33811درجة CVSS 7.507‏/05‏/2026

  When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

  CWE-415CWE-1341golang go
• عاليةCVE-2026-43178درجة CVSS 7.806‏/05‏/2026

  In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procmap_query() When user provides incorrectly sized buffer for build ID for PROCMAP_QUERY we return with -ENAMETOOLONG error. After recent changes th

  CWE-415CWE-1341linux linux_kernel
• عاليةCVE-2026-23918درجة CVSS 8.804‏/05‏/2026

  Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

  CWE-415CWE-1341apache http_server
• متوسطةCVE-2026-6654درجة CVSS 5.120‏/04‏/2026

  Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

  CWE-415CWE-416CWE-1341mozilla thin-vec