It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An attacker could possibly use this issue to trigger an invalid memory write, resulting in a denial of service or arbitrary code execution. Weiterlesen: USN-8945-1: XZ Utils vulnerability
Intelligence View
⚡ tsecurity.de Intelligence
USN-8945-1: XZ Utils vulnerability
It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
36 sources
CVE-2026-72072 | Linux Kernel up to 7.2-rc1 macsec net/mlx5e macsec_del_rxsc_ctx use after free (Nessus ID 369276)
35 more sources
VVulDB Updates3 hours agoCVE-2026-72123 | Linux Kernel up to 7.2-rc3 bcm bcm_delete_rx_op sk use after free (Nessus ID 369276) VVulDB Updates3 hours agoCVE-2026-72251 | Linux Kernel up to 7.2-rc2 nf_nat_sip.c nf_nat_sip buffer overflow (Nessus ID 369276) VVulDB Updates3 hours agoCVE-2026-72135 | Linux Kernel up to 7.2-rc2 TPM Character Device tpm_common_read off out-of-bounds (Nessus ID 369276) VVulDB Updates3 hours agoCVE-2026-72288 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 vgic vgic_prune_ap_list use after free (Nessus ID 369276) VVulDB Updates3 hours agoCVE-2026-74345 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 siw siw_cm.c siw_cm_work_handler use after free (Nessus ID 369276) VVulDB Updates3 hours agoCVE-2026-74377 | Linux Kernel up to 7.1.4 rxe rxe_resp_check_length out-of-bounds (Nessus ID 369276)
+29
11 sources
CVE-2020-25720 | Samba LDAP improper authorization (EUVD-2020-18374)
10 more sources
VVulDB Updates5 hours agoCVE-2026-114361 | HarnessRouter up to 0.31.10 Identity Mode gateway/app.py X-Harness-Org/X-Harness-Member improper authorization (GHSA-qrr8-m92f-7vfp / EUVD-2026-107496) VVulDB Updates4 hours agoCVE-2026-114135 | Jupyter Server up to 2.5.x GatewayClient GatewayClient.url is_authorized authorization (EUVD-2026-107544) VVulDB Updates4 hours agoCVE-2026-111699 | Niefy wx-api up to 0.8.2 Fan Controller /wxUser/getUserInfo openid improper authentication (EUVD-2026-102990) VVulDB Updates4 hours agoCVE-2026-111689 | Exrick XBoot up to 3.3.4 getByDepartmentId departmentId authorization (EUVD-2026-102980) VVulDB Updates4 hours agoCVE-2026-101640 | Oracle Marketing up to 12.2.15 Audience improper authorization (EUVD-2026-106048) VVulDB Updates4 hours agoCVE-2026-101660 | Oracle Mobile Field Service up to 12.2.15 Admin UI improper authorization (EUVD-2026-106065)
+4
9 sources
GitHub Release: openai/codex vrust-v0.164.0-alpha.10 (22.10.2026)
8 more sources
GGitHub4 hours agoGitHub Release: anthropics/claude-code v2.1.307 (22.10.2026) GGitHub2 hours agoGitHub Release: ollama/ollama v0.40.9-rc1 (22.10.2026) GGitHub5 hours agoGitHub Release: openclaw/openclaw vrelease-publish/59518bfd2a15-1792626457 (21.10.2026) GGitHub5 hours agoGitHub Release: openai/codex vrust-v0.163.0-alpha.11.1 (21.10.2026) GGitHub6 hours agoGitHub Release: ollama/ollama v0.40.9-rc0 (21.10.2026) GGitHub4 hours agoGitHub Release: telegramdesktop/tdesktop v7.3.3 (21.10.2026)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4285979/vulnerabilities-cve/usn-8945-1-xz-utils-vulnerability/