كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 3 من 3

• متوسطةCVE-2026-91205درجة CVSS 6.018‏/09‏/2026

  A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent directory, the attacker can replace a newly created directory with a symbolic link (

  CWE-363
• متوسطةCVE-2026-91203درجة CVSS 6.018‏/09‏/2026

  A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged file operations such as changing file ownership or permissions. By manipulating directory entries and

  CWE-363
• متوسطةCVE-2026-71125درجة CVSS 6.118‏/08‏/2026

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Vi

  CWE-363oracle vm_virtualbox