CVE-2018-25259

Terminal Services Manager 3.1 is affected by a stack-based buffer overflow in the computer names field. The flaw allows local attackers to execute arbitrary code by triggering structured exception handling, using a crafted input file with shellcode and jump instructions that can overwrite the SEH...

CVE-2018-25259 Terminal Services Manager 3.1 Buffer Overflow SEH

Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious input file with shellcode and jump instructions that...

kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()

A flaw was found in the Linux kernel. A local attacker with CAPNETADMIN capabilities, or remote packet traffic, could exploit a use-after-free vulnerability in the nftablesaddchain function's error handling. Successful exploitation could lead to a kernel crash, resulting in a Denial of Service Do...

PT-2026-37153

Name of the Vulnerable Software and Affected Versions i18next-fs-backend versions prior to 2.6.4 Description i18next-fs-backend substitutes the lng and ns options directly into the configured loadPath and addPath templates to read or write files from the disk. Because this interpolation is...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013562 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: Fix possible null-ptr-deref in ubifreevolume It willl cause null-ptr-deref in the following...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013865)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013865 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: qfq: Fix double list add in class with netem as child qdisc As described in Gerrard's...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013627 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore it...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013682)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013682 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-timers: Ensure timer ID search-loop limit is valid posixtimeradd tries to allocate a posix...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013729)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013729 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: Fix device name leak when register device failed in addmtddevice There is a kmemleak when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013532 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: alcor: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013660 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013540)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013540 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013527)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013527 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in addmissingindices stbl is s8 but it must contain offse...

PT-2026-34604

Name of the Vulnerable Software and Affected Versions DOMPurify versions prior to 3.4.0 Description An inconsistency exists between the handling of FORBID TAGS and FORBID ATTR when a function-based ADD TAGS configuration is used. Specifically, when the EXTRA ELEMENT HANDLING.tagCheck function...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013726 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: meson-gx: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

PT-2026-34457

Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious input file with shellcode and jump instructions that...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013536 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013550 advisory. In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant uninit The caller of deltimersync must...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013606)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013606 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid wi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013827 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: omaphsmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore it...