Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 120

Количество 120

nvd логотип

CVE-2026-32282

4 месяца назад

On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.

CVSS3: 6.4
EPSS: Низкий
msrc логотип

CVE-2026-32282

2 месяца назад

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

EPSS: Низкий
debian логотип

CVE-2026-32282

4 месяца назад

On Linux, if the target of Root.Chmod is replaced with a symlink while ...

CVSS3: 6.4
EPSS: Низкий
rocky логотип

RLSA-2026:23228

2 месяца назад

Important: image-builder security update

EPSS: Низкий
rocky логотип

RLSA-2026:22937

2 месяца назад

Important: image-builder security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-22937

27 дней назад

ELSA-2026-22937: image-builder security update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:22714

2 месяца назад

Important: osbuild-composer security update

EPSS: Низкий
rocky логотип

RLSA-2026:22450

2 месяца назад

Important: osbuild-composer security update

EPSS: Низкий
rocky логотип

RLSA-2026:25999

около 2 месяцев назад

Moderate: yggdrasil-worker-package-manager security update

EPSS: Низкий
github логотип

GHSA-xj38-jxc5-rppx

4 месяца назад

On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.

CVSS3: 6.4
EPSS: Низкий
oracle-oval логотип

ELSA-2026-25999

27 дней назад

ELSA-2026-25999: yggdrasil-worker-package-manager security update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2026-07252

4 месяца назад

Уязвимость языка программирования Go, связанная с неверным определением ссылки перед доступом к файлу, позволяющая нарушителю повысить свои привилегии

CVSS3: 6.4
EPSS: Низкий
ubuntu логотип

CVE-2026-33810

4 месяца назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.2
EPSS: Низкий
redhat логотип

CVE-2026-33810

4 месяца назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2026-33810

4 месяца назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.2
EPSS: Низкий
msrc логотип

CVE-2026-33810

4 месяца назад

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

CVSS3: 5.9
EPSS: Низкий
debian логотип

CVE-2026-33810

4 месяца назад

When verifying a certificate chain containing excluded DNS constraints ...

CVSS3: 8.2
EPSS: Низкий
redos логотип

ROS-20260710-73-0031

около 1 месяца назад

Уязвимость mimir

CVSS3: 6.4
EPSS: Низкий
redos логотип

ROS-20260430-73-0011

3 месяца назад

Уязвимость golang

CVSS3: 6.4
EPSS: Низкий
ubuntu логотип

CVE-2026-32283

4 месяца назад

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-32282

On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.

CVSS3: 6.4
0%
Низкий
4 месяца назад
msrc логотип
CVE-2026-32282

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

0%
Низкий
2 месяца назад
debian логотип
CVE-2026-32282

On Linux, if the target of Root.Chmod is replaced with a symlink while ...

CVSS3: 6.4
0%
Низкий
4 месяца назад
rocky логотип
RLSA-2026:23228

Important: image-builder security update

2 месяца назад
rocky логотип
RLSA-2026:22937

Important: image-builder security update

2 месяца назад
oracle-oval логотип
ELSA-2026-22937

ELSA-2026-22937: image-builder security update (IMPORTANT)

27 дней назад
rocky логотип
RLSA-2026:22714

Important: osbuild-composer security update

2 месяца назад
rocky логотип
RLSA-2026:22450

Important: osbuild-composer security update

2 месяца назад
rocky логотип
RLSA-2026:25999

Moderate: yggdrasil-worker-package-manager security update

0%
Низкий
около 2 месяцев назад
github логотип
GHSA-xj38-jxc5-rppx

On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.

CVSS3: 6.4
0%
Низкий
4 месяца назад
oracle-oval логотип
ELSA-2026-25999

ELSA-2026-25999: yggdrasil-worker-package-manager security update (MODERATE)

27 дней назад
fstec логотип
BDU:2026-07252

Уязвимость языка программирования Go, связанная с неверным определением ссылки перед доступом к файлу, позволяющая нарушителю повысить свои привилегии

CVSS3: 6.4
0%
Низкий
4 месяца назад
ubuntu логотип
CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.2
0%
Низкий
4 месяца назад
redhat логотип
CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.8
0%
Низкий
4 месяца назад
nvd логотип
CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.2
0%
Низкий
4 месяца назад
msrc логотип
CVE-2026-33810

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

CVSS3: 5.9
0%
Низкий
4 месяца назад
debian логотип
CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints ...

CVSS3: 8.2
0%
Низкий
4 месяца назад
redos логотип
ROS-20260710-73-0031

Уязвимость mimir

CVSS3: 6.4
0%
Низкий
около 1 месяца назад
redos логотип
ROS-20260430-73-0011

Уязвимость golang

CVSS3: 6.4
0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2026-32283

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

CVSS3: 7.5
1%
Низкий
4 месяца назад

Уязвимостей на страницу