CVE-2026-68402 (GCVE-0-2026-68402)

Vulnerability from cvelistv5 – Published: 2026-08-10 12:04 – Updated: 2026-08-19 16:34
VLAI
Title
wifi: cfg80211: bound element ID read when checking non-inheritance
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211_is_element_inherited() reads the first data octet of the candidate element (id = elem->data[0]) to look it up in an extension non-inheritance list. It does so after testing elem->id, but without verifying that the element actually has a data octet. A zero-length extension element (WLAN_EID_EXTENSION with length 0) therefore makes it read one octet past the end of the element. _ieee802_11_parse_elems_full() runs this check for every element of a frame once a non-inheritance context exists -- e.g. while parsing a per-STA profile of a Multi-Link element in a (re)association response, or a non-transmitted BSS profile -- so a crafted frame from an AP can trigger a one-octet slab-out-of-bounds read during element parsing: BUG: KASAN: slab-out-of-bounds in cfg80211_is_element_inherited Read of size 1 ... in net/wireless/scan.c Return early (treat the element as inherited) when an extension element carries no data, mirroring the existing handling of empty ID lists. The bug was found by fuzzing ieee802_11_parse_elems_full() under KASAN.
Severity
7.1 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3 , < 521dd5fe6d12b0d3c275f919738dc3a07117f4a5 (git)
Affected: f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3 , < 24154c172246ae3f0e69bb17c9111095685ceedc (git)
Affected: f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3 , < 2d31ebb26a14f103c9cdc5287fb20cb2d4bde901 (git)
Affected: f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3 , < 20c308d9a57722801961f816395bf825f7bde6bc (git)
Affected: f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3 , < 84bd907361c56fbd5523eceb2682cb39da059bd5 (git)
Affected: f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3 , < 11ac7a5e75f5132f1778e0c60981d30dc29fb869 (git)
Affected: f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3 , < ddf2773bcc8e49a43c561f22ec1e7924215d7947 (git)
Affected: f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3 , < cb8afea4655ff004fa7feee825d5c79783525383 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.2
Unaffected: 0 , < 5.2 (semver)
Unaffected: 5.10.265 , ≤ 5.10.* (semver)
Unaffected: 5.15.216 , ≤ 5.15.* (semver)
Unaffected: 6.1.183 , ≤ 6.1.* (semver)
Unaffected: 6.6.148 , ≤ 6.6.* (semver)
Unaffected: 6.12.101 , ≤ 6.12.* (semver)
Unaffected: 6.18.42 , ≤ 6.18.* (semver)
Unaffected: 7.1.6 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/wireless/scan.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "521dd5fe6d12b0d3c275f919738dc3a07117f4a5",
              "status": "affected",
              "version": "f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3",
              "versionType": "git"
            },
            {
              "lessThan": "24154c172246ae3f0e69bb17c9111095685ceedc",
              "status": "affected",
              "version": "f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3",
              "versionType": "git"
            },
            {
              "lessThan": "2d31ebb26a14f103c9cdc5287fb20cb2d4bde901",
              "status": "affected",
              "version": "f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3",
              "versionType": "git"
            },
            {
              "lessThan": "20c308d9a57722801961f816395bf825f7bde6bc",
              "status": "affected",
              "version": "f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3",
              "versionType": "git"
            },
            {
              "lessThan": "84bd907361c56fbd5523eceb2682cb39da059bd5",
              "status": "affected",
              "version": "f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3",
              "versionType": "git"
            },
            {
              "lessThan": "11ac7a5e75f5132f1778e0c60981d30dc29fb869",
              "status": "affected",
              "version": "f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3",
              "versionType": "git"
            },
            {
              "lessThan": "ddf2773bcc8e49a43c561f22ec1e7924215d7947",
              "status": "affected",
              "version": "f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3",
              "versionType": "git"
            },
            {
              "lessThan": "cb8afea4655ff004fa7feee825d5c79783525383",
              "status": "affected",
              "version": "f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/wireless/scan.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "lessThan": "5.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.265",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.183",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.101",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.265",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.216",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.183",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.148",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.101",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.42",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.6",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: bound element ID read when checking non-inheritance\n\ncfg80211_is_element_inherited() reads the first data octet of the\ncandidate element (id = elem-\u003edata[0]) to look it up in an extension\nnon-inheritance list. It does so after testing elem-\u003eid, but without\nverifying that the element actually has a data octet. A zero-length\nextension element (WLAN_EID_EXTENSION with length 0) therefore makes it\nread one octet past the end of the element.\n\n_ieee802_11_parse_elems_full() runs this check for every element of a\nframe once a non-inheritance context exists -- e.g. while parsing a\nper-STA profile of a Multi-Link element in a (re)association response,\nor a non-transmitted BSS profile -- so a crafted frame from an AP can\ntrigger a one-octet slab-out-of-bounds read during element parsing:\n\n  BUG: KASAN: slab-out-of-bounds in cfg80211_is_element_inherited\n  Read of size 1 ... in net/wireless/scan.c\n\nReturn early (treat the element as inherited) when an extension element\ncarries no data, mirroring the existing handling of empty ID lists.\n\nThe bug was found by fuzzing ieee802_11_parse_elems_full() under KASAN."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The malformed element arrives in an 802.11 management frame (beacon, probe response, ML probe response or (re)association response) processed by mac80211\u0027s element parser, so the attacker must be a rogue/spoofing AP within radio range of the victim station.\nAC:L - The attacker fully controls the frame contents and simply appends a zero-length WLAN_EID_EXTENSION element inside a frame that already establishes a non-inheritance context (multi-BSSID non-transmitted profile or a Multi-Link per-STA profile), which reliably triggers the over-read every time.\nPR:N - Beacons, probe responses and association responses are parsed before or independently of any authentication or key establishment, so an unauthenticated attacker with no credentials on the network can deliver the crafted frame.\nUI:N - Stations parse beacons and probe/association responses automatically as part of scanning, roaming and staying associated; no action by the device owner is needed for the crafted frame to be processed.\nS:U - The out-of-bounds read stays within the kernel\u0027s own memory and security authority; no other component or privilege domain is crossed.\nC:L - The read is a single octet past the end of the slab object, and its value is only compared against the non-inheritance ID list, influencing whether an element is parsed \u2014 this leaks at most a narrow side-channel oracle about one adjacent heap byte rather than arbitrary memory.\nI:N - The defect is purely a read; no kernel memory is written or corrupted, and the only consequence is a possibly wrong inherit/skip decision for one element in a frame the attacker already controls.\nA:H - The slab out-of-bounds access is fatal on KASAN, hardened or debug-allocator kernels (the bug was reported as a KASAN slab-out-of-bounds splat), and can be re-triggered at will by an adjacent unauthenticated attacker to repeatedly panic the machine."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T16:34:52.049Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/521dd5fe6d12b0d3c275f919738dc3a07117f4a5"
        },
        {
          "url": "https://git.kernel.org/stable/c/24154c172246ae3f0e69bb17c9111095685ceedc"
        },
        {
          "url": "https://git.kernel.org/stable/c/2d31ebb26a14f103c9cdc5287fb20cb2d4bde901"
        },
        {
          "url": "https://git.kernel.org/stable/c/20c308d9a57722801961f816395bf825f7bde6bc"
        },
        {
          "url": "https://git.kernel.org/stable/c/84bd907361c56fbd5523eceb2682cb39da059bd5"
        },
        {
          "url": "https://git.kernel.org/stable/c/11ac7a5e75f5132f1778e0c60981d30dc29fb869"
        },
        {
          "url": "https://git.kernel.org/stable/c/ddf2773bcc8e49a43c561f22ec1e7924215d7947"
        },
        {
          "url": "https://git.kernel.org/stable/c/cb8afea4655ff004fa7feee825d5c79783525383"
        }
      ],
      "title": "wifi: cfg80211: bound element ID read when checking non-inheritance",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-68402",
    "datePublished": "2026-08-10T12:04:22.113Z",
    "dateReserved": "2026-07-30T09:28:09.389Z",
    "dateUpdated": "2026-08-19T16:34:52.049Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-68402",
      "date": "2026-08-20",
      "epss": "0.00268",
      "percentile": "0.19109"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-68402\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-10T13:20:33.710\",\"lastModified\":\"2026-08-19T17:20:48.030\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nwifi: cfg80211: bound element ID read when checking non-inheritance\\n\\ncfg80211_is_element_inherited() reads the first data octet of the\\ncandidate element (id = elem-\u003edata[0]) to look it up in an extension\\nnon-inheritance list. It does so after testing elem-\u003eid, but without\\nverifying that the element actually has a data octet. A zero-length\\nextension element (WLAN_EID_EXTENSION with length 0) therefore makes it\\nread one octet past the end of the element.\\n\\n_ieee802_11_parse_elems_full() runs this check for every element of a\\nframe once a non-inheritance context exists -- e.g. while parsing a\\nper-STA profile of a Multi-Link element in a (re)association response,\\nor a non-transmitted BSS profile -- so a crafted frame from an AP can\\ntrigger a one-octet slab-out-of-bounds read during element parsing:\\n\\n  BUG: KASAN: slab-out-of-bounds in cfg80211_is_element_inherited\\n  Read of size 1 ... in net/wireless/scan.c\\n\\nReturn early (treat the element as inherited) when an extension element\\ncarries no data, mirroring the existing handling of empty ID lists.\\n\\nThe bug was found by fuzzing ieee802_11_parse_elems_full() under KASAN.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/wireless/scan.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3\",\"lessThan\":\"521dd5fe6d12b0d3c275f919738dc3a07117f4a5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3\",\"lessThan\":\"24154c172246ae3f0e69bb17c9111095685ceedc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3\",\"lessThan\":\"2d31ebb26a14f103c9cdc5287fb20cb2d4bde901\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3\",\"lessThan\":\"20c308d9a57722801961f816395bf825f7bde6bc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3\",\"lessThan\":\"84bd907361c56fbd5523eceb2682cb39da059bd5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3\",\"lessThan\":\"11ac7a5e75f5132f1778e0c60981d30dc29fb869\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3\",\"lessThan\":\"ddf2773bcc8e49a43c561f22ec1e7924215d7947\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f7dacfb11475ba777e1e84ccec2e14b0ba5a17a3\",\"lessThan\":\"cb8afea4655ff004fa7feee825d5c79783525383\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/wireless/scan.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.2\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.2\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.265\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.216\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.183\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.148\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.101\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.42\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.6\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":4.2}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/11ac7a5e75f5132f1778e0c60981d30dc29fb869\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/20c308d9a57722801961f816395bf825f7bde6bc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/24154c172246ae3f0e69bb17c9111095685ceedc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/2d31ebb26a14f103c9cdc5287fb20cb2d4bde901\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/521dd5fe6d12b0d3c275f919738dc3a07117f4a5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/84bd907361c56fbd5523eceb2682cb39da059bd5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/cb8afea4655ff004fa7feee825d5c79783525383\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ddf2773bcc8e49a43c561f22ec1e7924215d7947\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-17T07:15:53+00:00",
      "cve": "CVE-2026-68402",
      "id": "CVE-2026-68402",
      "initial_release_date": "2026-08-10T12:04:22.113000+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Linux kernel: Wi-Fi subsystem out-of-bounds read via crafted frames",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68402.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-13T16:22:16Z",
      "cve": "CVE-2026-68402",
      "id": "CVE-2026-68402",
      "initial_release_date": "2026-08-13T16:22:16Z",
      "product_status:known_affected": "144",
      "product_status:known_not_affected": "152",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-68402",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-68402.json",
      "version": "2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.