Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2026-47731)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47731 advisory. - Fix buffer overflow in DTLS certificate subject DN handling CVE-2026-59692 Resolves: RHEL-193570 Tenable has extracted the preceding description blo...

PT-2026-66737

Name of the Vulnerable Software and Affected Versions 389 Directory Server 389-ds-base affected versions not specified Description A stack buffer overflow occurs in the get ruvelement from berval function within repl5 ruv.c. The issue arises when digit characters from a network-supplied RUV berva...

The vulnerability of the WebRTC component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC component in Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the intel_pmuHW_config() function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the intelpmuHWconfig function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the WebML component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

RHEL 8 : libsolv (RHSA-2026:48815)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:48815 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer...

IBM Db2 db2flacc buffer overflow vulnerability

IBM Db2 is a relational database management system that provides data storage, querying, and management capabilities, supporting enterprise-level applications. There is a buffer overflow vulnerability in IBM Db2. This vulnerability stems from the setgid helper program db2flacc, which fails to...

The vulnerability of the vxlan_na_create() function in the drivers/net/vxlan/vxlan_core.c file of the networking device driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vxlannacreate function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel’s network device driver is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...

The vulnerability of the WebAudio component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebAudio component in the Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Qnap QTS and QuTS hero Stack-based Buffer Overflow (CVE-2025-62858)

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions:...

RHEL 9 : libsolv (RHSA-2026:48814)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:48814 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer...

CVE-2026-63033

A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObjectParseObjectAddress to read one byte past the end of the heap-allocated message buffer...

CVE-2026-56758 MZ Automation libiec61850 Out-of-bounds Read

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer...

CVE-2026-10535

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...

Updated libxfont2 packages fix security vulnerabilities

The updated packages fix security vulnerabilities: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow. CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow. CVE-2026-56002 computeProps Property Buffer Heap Buffer Overflow. CVE-2026-56003...

CVE-2026-10535 IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...

CVE-2026-10535

IBM Db2 is vulnerable to a stack-based buffer overflow in the setgid helper db2flacc, enabling privilege escalation from an unprivileged shell. Affected products/versions include IBM Db2 11.5.0–11.5.9 and 12.1.0–12.1.4 (Linux/Unix; Windows not affected). CVE-2026-10535, CWE-121, has a base CVSS v...

CVE-2026-10535

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...

EUVD-2026-51250

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...

SUSE CVE-2026-59250

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an oversized...