Elastic Agent 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-150)

Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where...

SUSE-SU-2026:3867-1 Security update for rsyslog

This update for rsyslog fixes the following issue: - Heap buffer overflow in the core RainerScript replace function bsc1275926...

SUSE CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

SUSE-SU-2026:3861-1 Security update for rsyslog

This update for rsyslog fixes the following issue: - Heap buffer overflow in the core RainerScript replace function bsc1275926...

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

SUSE-SU-2026:3860-1 Security update for rsyslog

This update for rsyslog fixes the following issue: - Heap buffer overflow in the core RainerScript replace function bsc1275926...

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

SUSE-SU-2026:3859-1 Security update for rsyslog

This update for rsyslog fixes the following issue: - Heap buffer overflow in the core RainerScript replace function bsc1275926...

PT-2026-89729

This update for rsyslog fixes the following issue: - Heap buffer overflow in the core RainerScript replace function bsc1275926...

PT-2026-86911

This update for rsyslog fixes the following issue: - Heap buffer overflow in the core RainerScript replace function bsc1275926...

PT-2026-86912

This update for rsyslog fixes the following issue: - Heap buffer overflow in the core RainerScript replace function bsc1275926...

PT-2026-86913

This update for rsyslog fixes the following issue: - Heap buffer overflow in the core RainerScript replace function bsc1275926...

PT-2026-82919

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the AppArmor module. The aa replace profiles function accesses the udata-size variable after the aa put loaddataudata function has been called, which...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

AZL-98400 CVE-2026-78002 affecting package rsyslog for versions less than 8.2308.0-7

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

UBUNTU-CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

EUVD-2026-67085

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-78002

A heap buffer overflow in the RainerScript replace() function of rsyslog allows an unauthenticated remote attacker to cause a denial of service by sending specially crafted syslog messages. The root cause is an incorrect buffer size calculation during string replacement, leading to memory corrupt...