Back to Zero Wire

Memory corruption

Security briefings tagged with Memory corruption

Needs attention

Última revisión

Patch

php2shell

CVE-2026-109618 · CVE-2026-109619 · CVE-2026-115560

PHP runtime flaws can let unauthenticated attackers run code; a related session upload progress flaw affects applications with specific session settings.

Ver detallesLeer la publicación del blog

Riesgo

CISA lists the original two flaws as known exploited. The separate session upload progress flaw was not in CISA's catalog on November 9.

Acción recomendada

Update the PHP runtime using the vendor advisory, and assess CVE-2026-115560 separately. Ask your hosting provider to confirm fixes if it manages PHP.

Última revisión

Patch

Linux IPv4 TCP use-after-free

CVE-2026-98432

A race condition in Linux's IPv4 TCP connection handling can expose kernel memory, crash a host, or allow remote code execution before application authentication.

Ver detalles

Riesgo

Researchers demonstrated root command execution against MPTCP listeners; other IPv4 TCP services may also be affected. Reports reviewed on November 2 did not confirm real-world attacks.

Acción recomendada

Install your distribution's fixed kernel and verify it is running after a reboot or vendor-supported activation. Updating containers alone does not patch the host.

Última revisión

Evaluar

node2shell

CVE-2026-111497

CVE-2026-111497 is a memory-corruption flaw in the shared Brotli decoder. Any service that decompresses attacker-controlled Brotli, in a request or an HTTP response, can be exposed.

Ver detalles

Riesgo

The decoder is used beyond Node.js, including in server-side fetches. The October 25 review did not confirm active exploitation.

Acción recomendada

Update or remove vulnerable Brotli decoders using each vendor's guidance, including copies bundled with runtimes or container images.