Veille CVE

Lundi 20 juillet 2026

5 CVE

Critique 0 Élevée 3 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Linux » ✕
  1. CVE-2026-46261 5.5 Moyenne

    Linux · Linux linux kernel

    In the Linux kernel, the following vulnerability has been resolved: spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() platform_get_resource_byname() can return NULL, which would cause a crash when passed the pointer to resource_size(). Move the fiu->memory_size assignment after the error check for devm_ioremap_resource() to prevent the potential NULL pointer dereference.

  2. CVE-2026-24187 8.8 Élevée

    NVIDIA GeForce · NVIDIA RTX, Quadro, NVS · NVIDIA Tesla · NVIDIA Guest driver

    NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

  3. CVE-2026-9111 8.8 Élevée

    Google Chrome

    Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

  4. CVE-2026-57968 7.8 Élevée

    Microsoft Windows Subsystem for Linux (WSL2) · Microsoft windows subsystem for linux

    Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  5. CVE-2026-57973 4.7 Moyenne

    Microsoft Windows Subsystem for Linux (WSL2) · Microsoft windows subsystem for linux

    Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.