https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:24:44.958411+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-00455 bdu:2023-00455 2026-10-02T12:24:44.977228+00:00 bdu:2023-00455 https://cve.radiocsirt.org/vuln/certfr-2022-avi-881 certfr-2022-avi-881 — De multiples vulnérabilités ont été découvertes dans Google Android. Elles permettent à un attaquant de provoquer un dé… 2026-10-02T12:24:44.977269+00:00 certfr-2022-avi-881 https://cve.radiocsirt.org/vuln/euvd-2026-13178 EUVD-2026-13178 2026-10-02T12:24:44.977288+00:00 EUVD-2026-13178 https://cve.radiocsirt.org/vuln/fkie_cve-2022-20421 fkie_cve-2022-20421 2026-10-02T12:24:44.977300+00:00

In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel

 https://cve.radiocsirt.org/vuln/ghsa-gwp4-2h57-rrxw GHSA-gwp4-2h57-rrxw 2026-10-02T12:24:44.977328+00:00

In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel

 https://cve.radiocsirt.org/vuln/gsd-2022-20421 gsd-2022-20421 2026-10-02T12:24:44.977343+00:00 gsd-2022-20421 https://cve.radiocsirt.org/vuln/icsa-23-166-10 ICSA-23-166-10 — Siemens SIMATIC S7-1500 TM MFP BIOS 2026-10-02T12:24:44.977353+00:00

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32. The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite lo…

 https://cve.radiocsirt.org/vuln/oesa-2022-2013 OESA-2022-2013 — kernel security update 2026-10-02T12:24:44.977507+00:00

Affected: openEuler:20.03-LTS-SP1: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel(CVE-2022-20421) In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel(CVE-2022-20422)

mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.(CVE-2022-42703)

roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress.(CVE-2022-41850)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-20421 UBUNTU-CVE-2022-20421 2026-10-02T12:24:44.977538+00:00

Affected: Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-aws-5.4 and 110 more

In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1599 WID-SEC-W-2022-1599 — Android Patchday October 2022 2026-10-02T12:24:44.977667+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand zu verursachen.