Adobe Bridge 15.x < 15.1.9 / 16.x < 16.0.8 Multiple Vulnerabilities (APSB26-167)

The version of Adobe Bridge installed on the remote Windows host is prior to 15.1.9 or 16.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-167 advisory. - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio...

Unity Linux 20.1070a Security Update: qt5-qtbase (UTSA-2026-130091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130091 advisory. An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminat...

Linux Distros Unpatched Vulnerability : CVE-2026-110143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the...

Linux Distros Unpatched Vulnerability : CVE-2026-107611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to re...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130120 advisory. rsync before 3.5.0contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing...

Security Updates for Microsoft Excel Products C2R (October 2026)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-97003, CVE-2026-97004, CVE-2026-97007, CVE-2026-97741,...

Linux Distros Unpatched Vulnerability : CVE-2026-109677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcardLocateCardsByATRACall because the ATR pattern cbAtr byte count i...

PT-2026-113688

The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...

PT-2026-114235

Name of the Vulnerable Software and Affected Versions FileRise versions prior to 3.18.0 Description FileRise flattens logical folder paths into metadata filenames by replacing separators and spaces with hyphens. This process allows distinct folders, such as team/docs and team-docs, to share a...

PT-2026-114384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the parse posix sids function fails to validate the server-supplied out len against the actual length of the received iov iov len. If a server...

UBUNTU-CVE-2026-98405

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parseposixsids In parseposixsids, sidsbufend is calculated using the server-supplied outlen without being validated against the actual length of the received iov iovlen. If a server...

PT-2026-114124

Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader core/string/optimized translation.cpp, OptimizedTranslation::get message. Offsets read from the hash table of a crafted .translation resource are used as indices into the bucket table without bounds validatio...

CVE-2026-103946: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...

PT-2026-114039

Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute bounds...

PT-2026-114117

MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Ap sort cmp and Ap...

CVE-2026-19673: Out-of-bounds Read

ethernetrecv in subsys/net/l2/ethernet/ethernet.c validates only that the first netbuf of a received frame holds a plain 14-byte struct netethhdr. When the ethertype is 0x8100 and VLAN is enabled on the interface, the same buffer is reinterpreted as the 18-byte struct netethvlanhdr without...

PT-2026-113774

Name of the Vulnerable Software and Affected Versions DPDK versions prior to 23.11.8 DPDK versions prior to 24.11.8 DPDK versions prior to 25.11.4 openvswitch versions 2.11, 2.12, 2.17, 3.0, 3.1, 3.5, and 3.6 Description A flaw exists in the DPDK GSO library during software segmentation. When...

PT-2026-114101

CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI read node header that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminated end tag causes ADFI stridx c to scan past disk node dat...

CVE-2026-98405

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parseposixsids In parseposixsids, sidsbufend is calculated using the server-supplied outlen without being validated against the actual length of the received iov iovlen. If a server...

FreeBSD-SA-26:72.bhyve

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:72.bhyve Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in bhyve device models Category: core Module: bhyve Announced: 2026-10-14...