https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T22:13:47.577341+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-43793 EUVD-2026-43793 2026-10-18T22:13:47.580754+00:00 EUVD-2026-43793 https://cve.radiocsirt.org/vuln/fkie_cve-2020-17534 fkie_cve-2020-17534 2026-10-18T22:13:47.580791+00:00

There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in `webkit` subproject of HTML/Java API version 1.7. A similar vulnerability has recently been disclosed in other Java projects and the fix in HTML/Java API version 1.7.1 follows theirs: To avoid local privilege escalation version 1.7.1 creates the temporary directory atomically without dealing with the temporary file: https://github.com/apache/netbeans-html4j/commit/fa70e507e5555e1adb4f6518479fc408a7abd0e6

 https://cve.radiocsirt.org/vuln/ghsa-ppc3-fpvh-7396 GHSA-ppc3-fpvh-7396 — Improper synchronization in Apache Netbeans HTML/Java API 2026-10-18T22:13:47.580829+00:00

Affected: Maven: org.netbeans.html:pom

There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in `webkit` subproject of HTML/Java API version 1.7. A similar vulnerability has recently been disclosed in other Java projects and the fix in HTML/Java API version 1.7.1 follows theirs: To avoid local privilege escalation version 1.7.1 creates the temporary directory atomically without dealing with the temporary file.

 https://cve.radiocsirt.org/vuln/gsd-2020-17534 gsd-2020-17534 2026-10-18T22:13:47.580856+00:00 gsd-2020-17534 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-17534 UBUNTU-CVE-2020-17534 2026-10-18T22:13:47.580869+00:00

Affected: Ubuntu:16.04:LTS: netbeans, Ubuntu:18.04:LTS: netbeans, Ubuntu:20.04:LTS: netbeans, Ubuntu:22.04:LTS: netbeans, Ubuntu:24.04:LTS: netbeans, Ubuntu:25.10: netbeans, Ubuntu:26.10: netbeans, Ubuntu:26.04:LTS: netbeans

There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in `webkit` subproject of HTML/Java API version 1.7. A similar vulnerability has recently been disclosed in other Java projects and the fix in HTML/Java API version 1.7.1 follows theirs: To avoid local privilege escalation version 1.7.1 creates the temporary directory atomically without dealing with the temporary file: https://github.com/apache/netbeans-html4j/commit/fa70e507e5555e1adb4f6518479fc408a7abd0e6