PT-2026-122380

Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flx decode delta fli function in gst/flx/gstflxdec...

PT-2026-122329

Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flx decode delta fli function in gst/flx/gstflxdec...

PT-2026-122288

Security vulnerability affects the libjpeg-turbo package. A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2 merged upsample internal function of jdmrgext...

Linux Distros Unpatched Vulnerability : CVE-2026-110155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

PT-2026-114310

Name of the Vulnerable Software and Affected Versions DPDK affected versions not specified Description A flaw exists in the DPDK lib/vhost vhost-crypto backend. An integer overflow occurs during chain length checks, combined with missing length checks on the RSA path, which can lead to a host...

PT-2026-114301

Name of the Vulnerable Software and Affected Versions DPDK versions prior to 25.11.4-1.1 Description A TOCTOU Time-of-Check to Time-of-Use double-fetch of control-queue descriptors in the lib/vhost library leads to a heap buffer overflow. This occurs within the VDUSE control-queue handler, allowi...

PT-2026-114311

Name of the Vulnerable Software and Affected Versions DPDK nfp vDPA driver affected versions not specified Description A flaw in the nfp vDPA driver allows stack and heap buffers, which are sized for a single queue pair, to be overflowed when multiple virtqueues are configured. This can result in...

Linux Distros Unpatched Vulnerability : CVE-2026-110166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

PT-2026-122682

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

ALSA-2026:82807 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: ipv6: validate extension header length before copying to cmsg CVE-2026-63920 kernel: drm/amd/display: set newstre...

CVE-2026-86562: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

AlmaLinux 8 : mod_auth_openidc:2.3 (ALSA-2026:77369)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:77369 advisory. modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsing CVE-2026-54789 cjose: cjose: Heap buffer overflow in AES Key Wrap...

CVE-2017-20286

DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...

Adobe Substance 3D Stager 3.0.0 < 3.1.9 Multiple Vulnerabilities (APSB26-170)

The version of Adobe Substance 3D Stager installed on the remote Windows host is prior to 3.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-170 advisory. - Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary cod...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2026:4636-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4636-1 advisory. - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Fre...

RockyLinux 8 : glibc (RLSA-2026:80798)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80798 advisory. glibc: Fix out-of-bounds array write in tdelete CVE-2026-19542 glibc: Non-progress DoS in SHIFTJISX0213 - CVE-2026-77117 glibc: Non-progress DoS in...

RHEL 9 : hplip (RHSA-2026:82882)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:82882 advisory. The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printer...

Security Updates for Microsoft Office Products (October 2026) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the october-14-2026 advisory. - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-70215, CVE-2026-8814...

CVE-2026-73791: Heap-based Buffer Overflow

A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow...

RHEL 10 : hplip (RHSA-2026:82883)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:82883 advisory. The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printe...