Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: The GNU C Library glibc 2.45 Clear all filters
TI-2026-63696 CVE-2026-95818 · GHSA-h8x4-734c-9753

AT_SECURE program buffer overflow via $ORIGIN processing

Priority LOW 16

A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs.

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00102 Published 2026-09-22 Partial fix · 2.45 CWE-121
TI-2026-59353 CVE-2026-86805 · GHSA-fmf4-pr35-46c2

AT_SECURE programs may load attacker-controlled code via $ORIGIN

Priority LOW 29

A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to escalate privileges.

CVSS 3.1MEDIUM 6.3 Local Low privileges User interaction EPSS 0.00097 Published 2026-09-22 Partial fix · 2.45 CWE-367