Apple Security Advisory 07-27-2026-3

Apple Security Advisory 07-27-2026-3 - macOS Sequoia 15.7.8 addresses buffer overflow, bypass, code execution, denial of service, double free, heap corruption, information leakage, integer overflow, out of bounds read, out of bounds write, traversal, and use-after-free vulnerabilities...

F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000162784)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000162784 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its...

Oracle Linux 9 : kernel (ELSA-2026-51035)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-51035 advisory. - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup Waiman Long RHEL-193526 CVE-2026-52977 - futex: Require sysfutexrequeue to have...

MiracleLinux 9 : plexus-utils-3.3.0-14.el9_8 (AXSA:2026-1492:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1492:01 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description bloc...

Slackware Linux 15.0 / current libXfont2 Multiple Vulnerabilities (SSA:2026-218-01)

The version of libXfont2 installed on the remote host is prior to 2.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-218-01 advisory. New libXfont2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

RHEL 10 : kernel (RHSA-2026:51295)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51295 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: ioam: fix heap buffer overflow ...

RHEL 8 : container-tools:rhel8 (RHSA-2026:51288)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51288 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...

MiracleLinux 9 : vim-8.2.2637-26.el9_8.10.ML.1 (AXSA:2026-1480:21)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1480:21 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162...

HPESBHF05066 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31648 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N | 3.9 |...

GHSA-6HR6-W5QG-QMWG

creationtimestamp| type| source ---|---|--- 2026-08-06 23:32:34+00:00| seen| https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b 2026-08-07 00:07:12+00:00| seen| https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b...

CVE-2026-71439

creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:14+00:00| published-proof-of-concept| https://github.com/mermaid-js/mermaid/security/advisories/GHSA-rhh3-jpg6-66xh...

CVE-2026-71430

creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:12+00:00| published-proof-of-concept| https://github.com/uhop/node-re2/security/advisories/GHSA-8hcv-x26h-mcgp 2026-08-07 06:34:35+00:00| seen| https://gist.github.com/alon710/455dd27ab1381c77c49e252fb102cb9f...

CVE-2026-71498

creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:09+00:00| published-proof-of-concept| https://github.com/uhop/node-re2/security/advisories/GHSA-j4r3-hg7j-8chg 2026-08-07 05:35:28+00:00| seen| https://gist.github.com/alon710/0c61a6195ede2fd8a0ca10d8b63bbf6e...

CVE-2026-56381

creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-g3hp-vvqf-8vw6...

CVE-2026-56393

creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-4mgv-366x-qxvx...

GHSA-957R-QF9P-67XW

creationtimestamp| type| source ---|---|--- 2026-08-06 22:32:31+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7 2026-08-07 00:05:24+00:00| seen| https://gist.github.com/alon710/40498cd7ab099bfd269056fcd2fad5d7...

DEBIAN-CVE-2026-71554

h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host header, and forward every Host header to the consuming application. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request...

DEBIAN-CVE-2026-19156

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

DEBIAN-CVE-2026-19145

Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

[SECURITY] [DLA 4722-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4722-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 06, 2026 https://wiki.debian.org/LTS -...