|
2491
|
8.1 |
HIGH
Adjacent
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
The wacom_intuos_bt_irq() function processes Bluetooth HID reports
with…
|
CWE-125
Out-of-bounds Read
|
CVE-2026-43051
|
2026-05-8 03:00 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2492
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
vt: discard stale unicode buffer on alt screen exit after resize
When enter_alt_screen() saves vc_uni_lines into vc_saved_uni_lin…
|
CWE-125
Out-of-bounds Read
|
CVE-2026-31742
|
2026-05-8 02:42 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2493
|
9.1 |
CRITICAL
Network
|
torproject
|
tor
|
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.
|
CWE-684
Incorrect Provision of Specified Functionality
|
CVE-2026-44597
|
2026-05-8 02:34 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2494
|
5.3 |
MEDIUM
Network
|
torproject
|
tor
|
Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.
|
CWE-669
Incorrect Resource Transfer Between Spheres
|
CVE-2026-44599
|
2026-05-8 02:31 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2495
|
5.3 |
MEDIUM
Network
|
torproject
|
tor
|
Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010.
|
CWE-696
Incorrect Behavior Order
|
CVE-2026-44600
|
2026-05-8 02:26 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2496
|
9.1 |
CRITICAL
Network
|
torproject
|
tor
|
Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.
|
CWE-193
Off-by-one Error
|
CVE-2026-44603
|
2026-05-8 02:24 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2497
|
8.8 |
HIGH
Local
|
-
|
-
|
NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container …
|
CWE-22
Path Traversal
|
CVE-2026-7875
|
2026-05-8 02:15 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2498
|
5.3 |
MEDIUM
Network
|
kazuho
|
starlet
|
Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence.
Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both head…
|
CWE-444
HTTP Request Smuggling
|
CVE-2026-40561
|
2026-05-8 02:15 |
2026-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2499
|
7.8 |
HIGH
Local
|
openclaw
|
openclaw
|
OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override critical runtime variables. Malicious…
|
CWE-184
Incomplete Blacklist
|
CVE-2026-44114
|
2026-05-8 02:07 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2500
|
8.8 |
HIGH
Network
|
openclaw
|
openclaw
|
OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell ex…
|
CWE-184
Incomplete Blacklist
|
CVE-2026-44115
|
2026-05-8 02:07 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|