Vulnerabilities

TI-2026-69019 CVE-2026-104045 · GHSA-8wp7-x59q-g576

Race condition in SSSD autofs responder enables denial of service

MEDIUM 55

A flaw was found in SSSD.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00125 Published 2026-10-06 Fix deferred CWE-772

TI-2026-69020 CVE-2026-104046 · GHSA-35vq-gvvv-mccw

SSSD IdP pre-authentication state leaks memory, enabling denial of service

LOW 27

A flaw was found in SSSD (System Security Services Daemon).

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-10-06 Fix deferred CWE-770

TI-2026-68594 CVE-2026-104048 · GHSA-474r-m56w-5qgh

Authorization bypass in SSSD HBAC rules via username collision

HIGH 70

A flaw was found in SSSD.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00301 Published 2026-10-06 Fix deferred CWE-1025

TI-2026-68593 CVE-2026-104047 · GHSA-g6q7-jchg-6v7f

Query injection in SSSD Entra ID lookups exposes directory data

LOW 23

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-140

TI-2026-68550 CVE-2026-88252 · GHSA-qj34-9w8c-jph5

Denial of service in sssd responder via connection retry loop

MEDIUM 58

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-835

TI-2026-68280 CVE-2026-104039 · GHSA-6ffw-v8mm-gqgh

Expired pointer use in SSSD PAM responder enables denial of service

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-825

TI-2026-68273 CVE-2026-104032 · GHSA-9hff-39jv-57mx

Denial of service in SSSD via unprivileged autofs cache invalidation

MEDIUM 58

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00096 Published 2026-10-06 Fix deferred CWE-408

TI-2026-68272 CVE-2026-104031 · GHSA-p584-gvqg-45c6

Memory leak in SSSD autofs responder allows denial of service

LOW 23

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00096 Published 2026-10-06 Fix deferred CWE-772

TI-2026-67883 CVE-2026-104029 · GHSA-2chf-ff75-p482

Out-of-bounds read in SSSD autofs responder causes denial of service

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-10-05 Fix deferred CWE-125

TI-2026-67884 CVE-2026-104030 · GHSA-rwfv-xr9p-g8w4

Out-of-bounds read in SSSD passkey parsing causes denial of service

LOW 24

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0012 Published 2026-10-05 Fix deferred CWE-125

TI-2026-61496 CVE-2026-90462 · GHSA-58vh-w7mf-682f

Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization

MEDIUM 58

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0018 Published 2026-09-22 Fix deferred CWE-280

TI-2026-61838 CVE-2026-90996 · GHSA-xg93-wm7f-rmcx

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

LOW 24

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-09-14 Fix deferred CWE-191

TI-2026-61837 CVE-2026-90995 · GHSA-q5vg-f923-829p

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

LOW 24

A flaw was found in SSSD (System Security Services Daemon).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2026-09-14 Fix deferred CWE-476

TI-2026-48329 CVE-2026-68743 · GHSA-3v6f-w66g-3mv6

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

LOW 30

A flaw was found in SSSD.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00133 Published 2026-08-04 Fix deferred CWE-125

TI-2026-48330 CVE-2026-68744 · GHSA-xxfg-88q3-gxgm

Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply

LOW 15

A flaw was found in SSSD.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00133 Published 2026-08-04 Fix deferred CWE-908

TI-2026-48328 CVE-2026-68742 · GHSA-pwm5-x9cm-2ppf

Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0013 Published 2026-08-03 Fix deferred CWE-125

TI-2026-10808 CVE-2026-12610 · GHSA-f953-7679-xc38

Sssd: use-after-free crash in sssd' 'sssd_pam' process

LOW 29

A flaw was found in sssd.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00121 Published 2026-06-30 No fix listed CWE-825

TI-2026-39134 CVE-2026-54231 · GHSA-p464-2mqm-5h37

Abrt: unsanitized systemd journal content written to dump directory files enables content injection

LOW 24

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00185 Published 2026-06-13 Partial fix · 2.10.9-26.el8_10, 2.10.9-25.el8_4.2 +2 CWE-74

TI-2026-39133 CVE-2026-54230 · GHSA-gvjc-4rfj-mxxj

Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

LOW 35

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00228 Published 2026-06-13 Partial fix · 2.1.11-62.el7_9, 2.10.9-26.el8_10 +3 CWE-59

TI-2026-05478 CVE-2026-6245 · GHSA-g672-w7xh-qp9j

Sssd: out-of-bounds read in the sssd

LOW 24

A flaw was found in the System Security Services Daemon (SSSD).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2026-04-15 Fix deferred CWE-805

TI-2026-27294 CVE-2026-35094 · GHSA-9pg8-4hvg-h64m

Libinput: libinput: information disclosure via dangling pointer in lua plugin handling

LOW 24

A flaw was found in libinput.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-04-01 No fix listed CWE-825

TI-2026-27293 CVE-2026-35093 · GHSA-mr79-hxw4-8vpf

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

LOW 39

A flaw was found in libinput.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0018 Published 2026-04-01 Will not fix CWE-94

TI-2023-03827 CVE-2023-4134 · GHSA-hpvm-q8v2-j94r

Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()

LOW 24

A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.002 Published 2024-11-14 Fixed CWE-416

TI-2024-02862 CVE-2024-3056 · GHSA-rpcc-p8xm-rc6p

Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack

LOW 34

A flaw was found in Podman.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00545 Published 2024-08-02 Will not fix CWE-400

TI-2024-05840 CVE-2024-6293 · GHSA-9f8f-453p-rg87

Use after free in Google Chrome

MEDIUM 41

Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00614 Published 2024-06-24 Fixed in 126.0.6478.126 CWE-416

Vulnerabilities

Filters