Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 8 more products — RHSA-2026:90364 Clear all filters
TI-2026-63748 CVE-2026-96280

Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

Priority LOW 36

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocations while subsequent operations use the origi…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00586 Published 2026-09-27 Partial fix · 1.16.0-9.el10_2.4, 1.16.0-5.el10_0.6 +6 CWE-197
TI-2026-63745 CVE-2026-96275

Flatpak: flatpak: arbitrary write access as root via extra-data extraction

Priority MEDIUM 41

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extract_extra_data().

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00572 Published 2026-09-23 Partial fix · 1.16.0-9.el10_2.4, 1.16.0-5.el10_0.6 +6 CWE-22