Veille CVE

Mercredi 9 septembre 2026

2 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Linux » ✕
  1. CVE-2026-74859 6.8 Moyenne

    Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 9

    The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside ~/.themes by using ../ path traversal, absolute paths, or symlink entries.

  2. CVE-2026-86564 3.3 Faible

    Red Hat Fast Datapath for RHEL 10 · Red Hat Fast Datapath for RHEL 8 · Red Hat Fast Datapath for RHEL 9 · Red Hat Enterprise Linux 10

    A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.