|
641
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Do not skip unrelated mode changes in DSC validation
Starting with commit 17ce8a6907f7 ("drm/amd/display: Add ds…
Update
|
CWE-416
Use After Free
|
CVE-2026-31488
|
2026-04-28 21:58 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
642
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
spi: meson-spicc: Fix double-put in remove path
meson_spicc_probe() registers the controller with
devm_spi_register_controller(),…
Update
|
CWE-415
Double Free
|
CVE-2026-31489
|
2026-04-28 21:57 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
643
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/pf: Fix use-after-free in migration restore
When an error is returned from xe_sriov_pf_migration_restore_produce(),
the da…
Update
|
CWE-416
Use After Free
|
CVE-2026-31490
|
2026-04-28 21:52 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
644
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Harden depth calculation functions
An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size.
This can cau…
Update
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2026-31491
|
2026-04-28 21:51 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
645
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Initialize free_qp completion before using it
In irdma_create_qp, if ib_copy_to_udata fails, it will call
irdma_destr…
Update
|
CWE-908
Use of Uninitialized Resource
|
CVE-2026-31492
|
2026-04-28 21:46 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
646
|
9.6 |
CRITICAL
Network
|
microsoft
|
partner_center
|
Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.
Update
|
CWE-284
Improper Access Control
|
CVE-2026-24303
|
2026-04-28 21:11 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
647
|
10.0 |
CRITICAL
Network
|
microsoft
|
entra_id
|
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
Update
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-35431
|
2026-04-28 21:10 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
648
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
tracing: Drain deferred trigger frees if kthread creation fails
Boot-time trigger registration can fail before the trigger-data c…
Update
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-31481
|
2026-04-28 20:38 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
649
|
7.5 |
HIGH
Network
|
-
|
-
|
An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.
New
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-3323
|
2026-04-28 20:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
650
|
6.7 |
MEDIUM
Local
|
-
|
-
|
AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific directory, resulting in arbitra…
New
|
CWE-428
Unquoted Search Path or Element
|
CVE-2026-7280
|
2026-04-28 19:16 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
