The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).
cve-program ·
Vendor product: n/a
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: n/a
cve-program ·
Vendor product: n/a
cve-program ·
Vendor product: NR268
cve-program ·
Vendor product: kernel
cve-program ·
Vendor product: n/a
cve-program ·
Vendor product: nginx-ui
cve-program ·
Vendor product: https://github.com/curl/curl
cve-program ·
Vendor product: N3.js
cve-program ·
Vendor product: https://github.com/curl/curl
cve-program ·
https://wordpress.org/plugins: ppv-live-webcams
cve-program ·
Vendor product: https://github.com/curl/curl
cve-program ·
Vendor product: https://github.com/curl/curl
osv · BIT-gitea-2026-34966 · CVE-2026-34966 · CVE-2026-59765 · GO-2026-6039
Go: code.gitea.io/gitea · Go: gitea.dev
osv · BIT-gitea-2026-34966 · CVE-2026-34966 · CVE-2026-59765 · GHSA-2wm4-vwp6-v7xc
Go: gitea.dev
osv · BIT-kyverno-2026-84199 · CVE-2026-84199 · GO-2026-5371
Go: github.com/kyverno/kyverno
osv · BIT-kyverno-2026-84199 · CVE-2026-84199 · GHSA-fmqp-4wfc-w3v7
Go: github.com/kyverno/kyverno
osv · BIT-kyverno-2023-54356 · CVE-2023-54356 · GO-2023-1804
Go: github.com/kyverno/kyverno
osv · BIT-kyverno-2023-54356 · CVE-2023-54356 · GHSA-hgv6-w7r3-w4qw
Go: github.com/kyverno/kyverno
cve-program ·
Vendor product: https://github.com/curl/curl
cve-program ·
Vendor product: https://github.com/curl/curl
osv · BIT-golang-2025-47906 · CVE-2025-47906
Go: stdlib
osv · BIT-golang-2025-4673 · CVE-2025-4673
Go: stdlib
osv · CVE-2024-24786 · GHSA-8r3f-844c-mc37
Go: google.golang.org/protobuf
osv · BIT-golang-2026-33810 · CVE-2026-33810
Go: stdlib
cve-program ·
Vendor product: Metasploit Framework
cve-program ·
Vendor product: MarkLogic Server
cve-program ·
Vendor product: MarkLogic Server
cve-program ·
Vendor product: MarkLogic Server
cve-program ·
Vendor product: MarkLogic Server
cve-program ·
Vendor product: MarkLogic Server
cve-program ·
Vendor product: MarkLogic Server
cve-program ·
Vendor product: MarkLogic Server
cve-program ·
Vendor product: MarkLogic Server
cve-program ·
Vendor product: MarkLogic Server
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.