https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:13:49.131777+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-00165 bdu:2023-00165 2026-10-03T18:13:49.306441+00:00 bdu:2023-00165 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0003 certfr-2023-avi-0003 — De multiples vulnérabilités ont été découvertes dans les produits Android. Certaines d'entre elles permettent à un atta… 2026-10-03T18:13:49.306490+00:00 certfr-2023-avi-0003 https://cve.radiocsirt.org/vuln/euvd-2026-226631 EUVD-2026-226631 2026-10-03T18:13:49.306523+00:00 EUVD-2026-226631 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20928 fkie_cve-2023-20928 2026-10-03T18:13:49.306546+00:00

In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel

 https://cve.radiocsirt.org/vuln/ghsa-fvjw-c4jh-fp27 GHSA-fvjw-c4jh-fp27 2026-10-03T18:13:49.306593+00:00

In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel

 https://cve.radiocsirt.org/vuln/gsd-2023-20928 gsd-2023-20928 2026-10-03T18:13:49.306624+00:00 gsd-2023-20928 https://cve.radiocsirt.org/vuln/oesa-2023-1053 OESA-2023-1053 — kernel security update 2026-10-03T18:13:49.306645+00:00

Affected: openEuler:22.03-LTS-SP1: kernel

The Linux Kernel, the operating system core itself. Security Fix(es): In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel(CVE-2023-20928) A heap overflow bug in ksmbd_decode_ntlmssp_auth_blob in which nt_len can be less than CIFS_ENCPWD_SIZE. This results in a negative blen argument for ksmbd_auth_ntlmv2, where it calls memcpy using blen on memory allocated by kmalloc(blen + CIFS_CRYPTO_KEY_SIZE). Note that CIFS_ENCPWD_SIZE is 16 and CIFS_CRYPTO_KEY_SIZE is 8. We believe this bug can only result in a remote DOS and not privilege escalation nor RCE, as the heap overflow occurs when blen is in range (-8, -1].” Reference: https://securityonline.info/cve-2023-0210-flaw-in-linux-kernel-allows-unauthenticated-remote-dos-attacks/ https://www.spinics.net/lists/stable-commits/msg282893.html(CVE-2023-0210) In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.(CVE-2023-23559) There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the IO_WQ_WORK_FILES flag, which signals that the operation won't use current->nspro…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-20928 UBUNTU-CVE-2023-20928 2026-10-03T18:13:49.306712+00:00

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.4, Ubuntu:18.04:LTS: linux-azure-5.4, Ubuntu:18.04:LTS: linux-gcp-5.4, Ubuntu:18.04:LTS: linux-hwe-5.4, Ubuntu:18.04:LTS: linux-ibm-5.4, Ubuntu:18.04:LTS: linux-oracle-5.4, Ubuntu:18.04:LTS: linux-raspi-5.4, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3 and 88 more

In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0018 WID-SEC-W-2023-0018 — Android Patchday Januar 2023 2026-10-03T18:13:49.306955+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und um einen Denial of Service Zustand herbeizuführen.