DeutschShown in its original language — a full translation is planned for a future version.
Golang Go: Mehrere Schwachstellen
view advisory published 2026-04-07
Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Speicherbeschädigungen zu verursachen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33810US | high8.2 | — | ||
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constra… | ||||
| CVE-2026-32289US | medium6.1 | — | ||
Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template… | ||||
| CVE-2026-32288US | medium5.5 | — | ||
tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" for… | ||||
| CVE-2026-32283US | high7.5 | — | ||
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.… | ||||
| CVE-2026-32282US | medium6.4 | — | ||
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies… | ||||
| CVE-2026-32281US | high7.5 | — | ||
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial… | ||||
| CVE-2026-32280US | — | — | ||
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which ca… | ||||
| CVE-2026-27144US | high7.1 | — | ||
The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about no… | ||||
| CVE-2026-27143US | critical9.8 | — | ||
Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, p… | ||||
| CVE-2026-27140US | high8.8OT elevated | — | ||
SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass. | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-11881 vom 2026-05-01external
- Oracle Linux Security Advisory ELSA-2026-16101 vom 2026-07-15external
- Oracle Linux Security Advisory ELSA-2026-16875 vom 2026-05-15external
- Oracle Linux Security Advisory ELSA-2026-17075 vom 2026-05-15external
- Oracle Linux Security Advisory ELSA-2026-18722 vom 2026-06-27external
- Oracle Linux Security Advisory ELSA-2026-19350 vom 2026-06-26external
- Oracle Linux Security Advisory ELSA-2026-19351 vom 2026-06-25external
- Oracle Linux Security Advisory ELSA-2026-22141 vom 2026-07-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan