https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:56:16.147153+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2179 ALSA-2023:2179 — Moderate: libguestfs-winsupport security update 2026-10-03T10:56:16.378022+00:00

Affected: AlmaLinux:9: libguestfs-winsupport

The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine (VM) disk images.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-46790) * ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value (CVE-2022-30784) * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate (CVE-2022-30786) * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (CVE-2022-30788) * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array (CVE-2022-30789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-03700 bdu:2022-03700 2026-10-03T10:56:16.378092+00:00 bdu:2022-03700 https://cve.radiocsirt.org/vuln/certfr-2022-avi-527 certfr-2022-avi-527 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a… 2026-10-03T10:56:16.378111+00:00 certfr-2022-avi-527 https://cve.radiocsirt.org/vuln/cnvd-2022-82647 cnvd-2022-82647 2026-10-03T10:56:16.378127+00:00 cnvd-2022-82647 https://cve.radiocsirt.org/vuln/esea-2023:0283 ESEA-2023:0283 — virt:rhel bug fix update for RHSA-2023:2757 2026-10-03T10:56:16.378139+00:00

virt:rhel bug fix update for RHSA-2023:2757

 https://cve.radiocsirt.org/vuln/euvd-2026-262354 EUVD-2026-262354 2026-10-03T10:56:16.378161+00:00 EUVD-2026-262354 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30786 fkie_cve-2022-30786 2026-10-03T10:56:16.378171+00:00

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.

 https://cve.radiocsirt.org/vuln/ghsa-7wwc-f3r7-9qqw GHSA-7wwc-f3r7-9qqw 2026-10-03T10:56:16.378191+00:00

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.

 https://cve.radiocsirt.org/vuln/gsd-2022-30786 gsd-2022-30786 2026-10-03T10:56:16.378204+00:00 gsd-2022-30786 https://cve.radiocsirt.org/vuln/msrc_cve-2022-30786 msrc_CVE-2022-30786 — A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22. 2026-10-03T10:56:16.378214+00:00 msrc_CVE-2022-30786 https://cve.radiocsirt.org/vuln/oesa-2022-1685 OESA-2022-1685 — ntfs-3g security update 2026-10-03T10:56:16.378228+00:00

Affected: openEuler:20.03-LTS-SP1: ntfs-3g, openEuler:20.03-LTS-SP3: ntfs-3g, openEuler:22.03-LTS: ntfs-3g

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems.

Security Fix(es):

ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.(CVE-2021-46790)

An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.(CVE-2022-30783)

A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.(CVE-2022-30785)

An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.(CVE-2022-30787)

A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.(CVE-2022-30784)

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.(CVE-2022-30786)

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.(CVE-2022-30788)

A crafted NTFS image can cause a heap-based buffer…

 https://cve.radiocsirt.org/vuln/rhsa-2023:2757 RHSA-2023:2757 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update 2026-10-03T10:56:16.378269+00:00

ntfs-3g: heap-based buffer overflow in ntfsck QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array tpm2: TCG TPM2.0 implementations vulnerable to memory corruption

 https://cve.radiocsirt.org/vuln/suse-su-2022:2836-1 SUSE-SU-2022:2836-1 — Security update for ntfs-3g_ntfsprogs 2026-10-03T10:56:16.378296+00:00

Security update for ntfs-3g_ntfsprogs

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-30786 UBUNTU-CVE-2022-30786 2026-10-03T10:56:16.378313+00:00

Affected: Ubuntu:Pro:14.04:LTS: ntfs-3g, Ubuntu:Pro:16.04:LTS: ntfs-3g, Ubuntu:18.04:LTS: ntfs-3g, Ubuntu:20.04:LTS: ntfs-3g, Ubuntu:22.04:LTS: ntfs-3g

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1185 WID-SEC-W-2023-1185 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T10:56:16.378335+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.