Read the docs
TI-2026-63789 Aliases CVE-2026-96512GHSA-jj2h-hcrf-9gfx

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

Priority LOW 36CWE-863Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-863.

Summary

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an unprivileged local user can set TZ to an extreme timezone offset to shift the authorization window by up to approximately 25 hours, causing expired rules to be treated as valid. This allows the user to execute commands outside the intended time window. Authentication is not bypassed; only the time-based authorization check is affected.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00321 25th percentileScored 2026-11-07
Fix Fixed Red Hat: 16 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Enterprise Linux 10—1.9.17-10.p2.el10_2.7Patch availableCNA
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—1.9.15-8.p5.el10_0.5Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—1.8.23-10.el7_9.6Patch availableCNA
Red HatRed Hat Enterprise Linux 8—1.9.5p2-2.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—1.8.29-7.el8_4.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—1.8.29-7.el8_4.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—1.9.5p2-1.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—1.9.5p2-1.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—1.9.5p2-1.el8_8.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—1.9.5p2-1.el8_8.4Patch availableCNA
Red HatRed Hat Enterprise Linux 9—1.9.17p2-3.el9_8.3Patch availableCNA
Red HatRed Hat Enterprise Linux 9—1.9.17p2-3.el9_8.3Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—1.9.5p2-9.el9_2.5Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions—1.9.5p2-10.el9_4.4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support—1.9.5p2-10.el9_6.4Patch availableCNA
Red HatRed Hat Hardened Images—1.9.17-16.p2.2.hum1Patch availableCNA
Red HatRed Hat OpenShift AI 3.0—1793041981Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793042006Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1793041995Patch availableCNA
Red HatRed Hat Update Infrastructure 5—1791964013Patch availableCNA
Red HatRed Hat Update Infrastructure 5—1791978693Patch availableCNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 1.9.17-10.p2.el10_2.7 Patch available CNA
  • Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 1.9.15-8.p5.el10_0.5 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 1.8.23-10.el7_9.6 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.9.5p2-2.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.8.29-7.el8_4.4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.8.29-7.el8_4.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.9.5p2-1.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.9.5p2-1.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.9.5p2-1.el8_8.4 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.9.5p2-1.el8_8.4 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.9.17p2-3.el9_8.3 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.9.17p2-3.el9_8.3 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.9.5p2-9.el9_2.5 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.9.5p2-10.el9_4.4 Patch available CNA
  • Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 1.9.5p2-10.el9_6.4 Patch available CNA
  • Red Hat Hardened Images VendorRed Hat Affected — Fixed in 1.9.17-16.p2.2.hum1 Patch available CNA
  • Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1793041981 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793042006 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1793041995 Patch available CNA
  • Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1791964013 Patch available CNA
  • Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1791978693 Patch available CNA

CPE names CNA · 22

CPEVersionsRoleVendor
cpe:/o:redhat:enterprise_linux:10.210.2—Red Hat
cpe:/o:redhat:enterprise_linux_eus:10.010.0—Red Hat
cpe:/o:redhat:rhel_els:77—Red Hat
cpe:/o:redhat:enterprise_linux:8::baseos8—Red Hat
cpe:/o:redhat:rhel_aus:8.4::baseos8.4—Red Hat
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos8.4—Red Hat
cpe:/o:redhat:rhel_aus:8.6::baseos8.6—Red Hat
cpe:/o:redhat:rhel_eus_long_life:8.6::baseos8.6—Red Hat
cpe:/o:redhat:rhel_e4s:8.8::baseos8.8—Red Hat
cpe:/o:redhat:rhel_tus:8.8::baseos8.8—Red Hat
  • cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
  • cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:8::baseos Versions 8 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:8.4::baseos Versions 8.4 — ·Red Hat
  • cpe:/o:redhat:rhel_eus_long_life:8.4::baseos Versions 8.4 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:8.6::baseos Versions 8.6 — ·Red Hat
  • cpe:/o:redhat:rhel_eus_long_life:8.6::baseos Versions 8.6 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:8.8::baseos Versions 8.8 — ·Red Hat
  • cpe:/o:redhat:rhel_tus:8.8::baseos Versions 8.8 — ·Red Hat
Show 12 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/o:redhat:enterprise_linux:9::baseos9—Red Hat
cpe:/a:redhat:rhel_e4s:9.2::appstream9.2—Red Hat
cpe:/o:redhat:rhel_e4s:9.2::baseos9.2—Red Hat
cpe:/a:redhat:rhel_e4s:9.4::appstream9.4—Red Hat
cpe:/o:redhat:rhel_e4s:9.4::baseos9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.6::appstream9.6—Red Hat
cpe:/o:redhat:rhel_eus:9.6::baseos9.6—Red Hat
cpe:/a:redhat:hummingbird:11—Red Hat
cpe:/a:redhat:openshift_ai:3.0::el93.0—Red Hat
cpe:/a:redhat:openshift_ai:3.4::el93.4—Red Hat
cpe:/a:redhat:rhui:5::el95—Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:9::baseos Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:9.2::baseos Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:9.4::baseos Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
  • cpe:/o:redhat:rhel_eus:9.6::baseos Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:hummingbird:1 Versions 1 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:3.0::el9 Versions 3.0 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:3.4::el9 Versions 3.4 — ·Red Hat
  • cpe:/a:redhat:rhui:5::el9 Versions 5 — ·Red Hat

Remediation

Red Hat 16 advisories

  • RHSA-2026:92349 Released 2026-10-29 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) sudo-1.9.5p2-1.el8_6.4
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) sudo-1.9.5p2-1.el8_6.4
  • RHSA-2026:92326 Released 2026-10-29 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) sudo-1.8.23-10.el7_9.6
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) sudo-devel-1.8.23-10.el7_9.6, sudo-devel-1.8.23-10.el7_9.6.ppc
  • RHSA-2026:92325 Released 2026-10-29 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) sudo-1.8.29-7.el8_4.4
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) sudo-1.8.29-7.el8_4.4
Show 13 more Red Hat advisories
  • RHSA-2026:91244 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (ROCm 6.4)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:91219 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (ROCm)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:91217 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (ROCm 7.1)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
  • RHSA-2026:90287 Released 2026-10-26 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) sudo-python-plugin-1.9.5p2-9.el9_2.5
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) sudo-1.9.5p2-9.el9_2.5
  • RHSA-2026:86633 Released 2026-10-22 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) sudo-python-plugin-1.9.15-8.p5.el10_0.5
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) sudo-1.9.15-8.p5.el10_0.5
  • RHSA-2026:87026 Released 2026-10-21 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) sudo-1.9.5p2-1.el8_8.4
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) sudo-1.9.5p2-1.el8_8.4
  • RHSA-2026:86634 Released 2026-10-21 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) sudo-python-plugin-1.9.5p2-10.el9_6.4
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) sudo-1.9.5p2-10.el9_6.4
  • RHSA-2026:86635 Released 2026-10-21 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) sudo-python-plugin-1.9.5p2-10.el9_4.4
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) sudo-1.9.5p2-10.el9_4.4
  • RHSA-2026:82939 Released 2026-10-14 · Red Hat rating Important
    Red Hat Update Infrastructure 5.3 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
  • RHSA-2026:75571 Released 2026-10-05 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux AppStream (v. 9) sudo-python-plugin-1.9.17p2-3.el9_8.3
    • Red Hat Enterprise Linux BaseOS (v. 9) sudo-1.9.17p2-3.el9_8.3
  • RHSA-2026:75579 Released 2026-10-05 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux AppStream (v. 10) sudo-python-plugin-1.9.17-10.p2.el10_2.7
    • Red Hat Enterprise Linux BaseOS (v. 10) sudo-1.9.17-10.p2.el10_2.7
  • RHSA-2026:75580 Released 2026-10-05 · Red Hat rating Important
    sudo security update
    • Red Hat Enterprise Linux BaseOS (v. 8) sudo-1.9.5p2-2.el8_10
  • RHSA-2026:71609 Released 2026-09-24 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images sudo-1.9.17-16.p2.2.hum1@aarch64, sudo-1.9.17-16.p2.2.hum1@src, sudo-1.9.17-16.p2.2.hum1@x86_64 +6

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:75579
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:75571
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:90287
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:86635
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:86633
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:86634
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:75579
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:75580
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:75571
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:92325
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:92349
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:87026
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:90287
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:86635
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:86633
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:86634
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:92325
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:92349
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:87026
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:92326
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:92326
Red Hat Hardened ImagesFixed RHSA-2026:71609
Red Hat OpenShift AI 3.0Fixed RHSA-2026:91219
Red Hat OpenShift AI 3.4Fixed RHSA-2026:91217, RHSA-2026:91244
Red Hat Update Infrastructure 5Fixed RHSA-2026:82939
Not affected: 1 product
  • Red Hat Update Infrastructure 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-96512
  2. 2026-10-03 Alias added: GHSA-jj2h-hcrf-9gfx
  3. 2026-10-05 Fix available: sudo@0:1.9.17-10.p2.el10_2.7, sudo@0:1.9.17p2-3.el9_8.3, sudo@0:1.9.5p2-2.el8_10 · CNA
  4. 2026-10-05 3 new references · CNA
  5. 2026-10-05 Fix available: RHSA-2026:75580 · Red Hat
  6. 2026-10-05 Fix available: RHSA-2026:75579 · Red Hat
  7. 2026-10-05 Fix available: RHSA-2026:75571 · Red Hat
  8. 2026-10-05 Fix available: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 10) +2 · Red Hat
  9. 2026-10-15 Fix available: rhui5/installer-rhel9@1791964013, rhui5/rhua-rhel9@1791978693 · CNA
  10. 2026-10-15 1 new reference · CNA
  11. 2026-10-16 Fix available: RHSA-2026:82939 · Red Hat
  12. 2026-10-16 Fix available: Red Hat Update Infrastructure 5 · Red Hat
  13. 2026-10-21 Fix available: sudo@0:1.9.5p2-10.el9_4.4, sudo@0:1.9.5p2-10.el9_6.4 · CNA
  14. 2026-10-21 2 new references · CNA
  15. 2026-10-21 Fix available: RHSA-2026:86634 · Red Hat
  16. 2026-10-21 Fix available: RHSA-2026:86635 · Red Hat
  17. 2026-10-21 Fix available: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS E4S (v.9.4) +1 · Red Hat
  18. 2026-10-21 Fix available: sudo@0:1.9.5p2-1.el8_8.4 · CNA
  19. 2026-10-21 1 new reference · CNA
  20. 2026-10-22 Fix available: RHSA-2026:87026 · Red Hat
  21. 2026-10-22 Fix available: sudo@0:1.9.15-8.p5.el10_0.5 · CNA
  22. 2026-10-22 1 new reference · CNA
  23. 2026-10-22 Fix available: RHSA-2026:86633 · Red Hat
  24. 2026-10-23 Fix available: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS EUS (v. 10.0) +1 · Red Hat
  25. 2026-10-26 Fix available: sudo@0:1.9.5p2-9.el9_2.5 · CNA
  26. 2026-10-26 1 new reference · CNA
  27. 2026-10-26 Fix available: RHSA-2026:90287 · Red Hat
  28. 2026-10-26 Fix available: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2) · Red Hat
  29. 2026-10-29 Fix available: sudo@0:1.8.29-7.el8_4.4 · CNA
  30. 2026-10-29 1 new reference · CNA
  31. 2026-10-29 Fix available: sudo@0:1.9.5p2-1.el8_6.4 · CNA
  32. 2026-10-29 1 new reference · CNA
  33. 2026-10-29 Fix available: RHSA-2026:92325 · Red Hat
  34. 2026-10-29 Fix available: RHSA-2026:92349 · Red Hat
  35. 2026-10-29 Fix available: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) +1 · Red Hat
  36. 2026-10-29 Fix available: sudo@0:1.8.23-10.el7_9.6 · CNA
  37. 2026-10-29 1 new reference · CNA
  38. 2026-10-29 Fix available: rhai/base-image-rocm-6.4-rhel9@1793041995, rhai/base-image-rocm-7.1-rhel9@1793042006, rhai/base-image-rocm-rhel9@1793041981 · CNA
  39. 2026-10-29 3 new references · CNA
  40. 2026-10-30 Fix available: RHSA-2026:92326 · Red Hat
  41. 2026-10-30 Fix available: RHSA-2026:91217 · Red Hat
  42. 2026-10-30 Fix available: RHSA-2026:91219 · Red Hat
  43. 2026-10-30 Fix available: RHSA-2026:91244 · Red Hat
  44. 2026-10-30 Fix available: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS), Red Hat OpenShift AI 3.0 +1 · Red Hat

References

Advisory 16

Other 3

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences