https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-91782.htmlhttps://patchthecve.com/cve/CVE-2026-91782.htmlThu, 17 Sep 2026 14:17:54 +0000LOW 3.3: A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null pointer dereference. The attack requires a local approach. The exphttps://patchthecve.com/cve/CVE-2026-91781.htmlhttps://patchthecve.com/cve/CVE-2026-91781.htmlWed, 16 Sep 2026 15:28:36 +0000LOW 3.3: A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit hashttps://patchthecve.com/cve/CVE-2026-91780.htmlhttps://patchthecve.com/cve/CVE-2026-91780.htmlWed, 16 Sep 2026 15:28:30 +0000LOW 3.3: A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could behttps://patchthecve.com/cve/CVE-2026-91779.htmlhttps://patchthecve.com/cve/CVE-2026-91779.htmlWed, 16 Sep 2026 15:28:26 +0000LOW 3.3: A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. Thhttps://patchthecve.com/cve/CVE-2026-90831.htmlhttps://patchthecve.com/cve/CVE-2026-90831.htmlWed, 16 Sep 2026 17:18:18 +0000MEDIUM 5.3: A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be usehttps://patchthecve.com/cve/CVE-2026-90830.htmlhttps://patchthecve.com/cve/CVE-2026-90830.htmlWed, 16 Sep 2026 15:28:03 +0000MEDIUM 5.3: A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed pubhttps://patchthecve.com/cve/CVE-2026-90829.htmlhttps://patchthecve.com/cve/CVE-2026-90829.htmlWed, 16 Sep 2026 15:28:15 +0000MEDIUM 5.3: A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has behttps://patchthecve.com/cve/CVE-2026-90828.htmlhttps://patchthecve.com/cve/CVE-2026-90828.htmlMon, 21 Sep 2026 17:49:28 +0000MEDIUM 5.3: A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local positiohttps://patchthecve.com/cve/CVE-2026-90804.htmlhttps://patchthecve.com/cve/CVE-2026-90804.htmlFri, 18 Sep 2026 14:42:39 +0000MEDIUM 4.8: A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset resuhttps://patchthecve.com/cve/CVE-2026-90803.htmlhttps://patchthecve.com/cve/CVE-2026-90803.htmlFri, 18 Sep 2026 14:41:59 +0000MEDIUM 5.3: A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally. Thehttps://patchthecve.com/cve/CVE-2026-90802.htmlhttps://patchthecve.com/cve/CVE-2026-90802.htmlFri, 18 Sep 2026 14:42:16 +0000MEDIUM 4.4: A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to the public and could be used for attacks.https://patchthecve.com/cve/CVE-2026-90801.htmlhttps://patchthecve.com/cve/CVE-2026-90801.htmlFri, 18 Sep 2026 14:42:27 +0000MEDIUM 5.3: A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may https://patchthecve.com/cve/CVE-2026-6846.htmlhttps://patchthecve.com/cve/CVE-2026-6846.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.8: A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, https://patchthecve.com/cve/CVE-2026-6845.htmlhttps://patchthecve.com/cve/CVE-2026-6845.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.0: A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the systehttps://patchthecve.com/cve/CVE-2026-6844.htmlhttps://patchthecve.com/cve/CVE-2026-6844.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.5: A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory c