Skip to content
OpenAdvisories

Archive

27 June 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-49413 Public exploit

    Flaw in Linuxulator execution of setugid binaries

    The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this flag is not yet set at the point where the auxiliary vector is constructed, so AT_SECURE was incorrectly set to zero for s…

  • High 7.8
    CVE-2026-45258 Public exploit

    Multiple vulnerabilities in the sound(4) mmap path

    dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could overflow, so that a large offset and length wrapped around and passed the check. The offset was then narr…

  • High 7.0
    CVE-2026-49417 Public exploit

    Multiple vulnerabilities in the sound(4) mmap path

    Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory could then be reused elsewhere while still accessible through the stale mapping. The /dev/dsp device nodes are world-…