webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds read due to improper bounds checking, resulting in an unexpected process crash...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102049 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ibget,setvalue The uvd/vce/vcn code accesses the IB at...

CVE-2026-64719

A flaw was found in WebKitGTK. Processing malicious web content can cause an out-of-bounds access issue due to improper bounds checking and result in an unexpected process crash. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds read due to improper bounds checking, resulting in an unexpected process crash...

CVE-2026-18102

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...

EUVD-2026-62853

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...

CVE-2026-18102

IBM i versions 7.3 through 7.6 (feature 5770-999) contain a heap-based buffer overflow (CWE-122) caused by an integer underflow during bounds checking . A remote authenticated attacker can exploit this to overwrite adjacent memory, resulting in a partial integrity impact. NVD rates it 4.3 MEDIUM ...

CVE-2026-16909

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking...

EUVD-2026-62830

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking...

CVE-2026-16909

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain an off-by-one error in bounds checking, enabling a remote attacker to execute arbitrary code (CVSS 8.8, HIGH). IBM's advisory is linked; no exploitation evidence is provided. Patch availability is not specified in the documents.

CVE-2026-16909 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking...

USN-8093-2: libssh vulnerability

USN-8093-1 fixed a vulnerability in libssh. This update provides the corresponsing fix for Ubuntu 26.04 LTS. Original advisory details: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a client application queried extension data out of bounds...

USN-8093-2 libssh vulnerability

USN-8093-1 fixed a vulnerability in libssh. This update provides the corresponsing fix for Ubuntu 26.04 LTS. Original advisory details: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a client application queried extension data out of bounds...

PT-2026-78688

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An integer underflow occurs during bounds checking, which could allow a remote authenticated attacker to overwrite adjacent memory. An integer underflow is a condition where a subtraction operation...

PT-2026-78665

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An off-by-one error in bounds checking allows a remote attacker to execute arbitrary code. An off-by-one error is a logic error where an iteration or loop runs one time too...

EUVD-2026-60499

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64784

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64784

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64784

A WebKit out-of-bounds access flaw, credited to Janggoon Lee and Amy Burnett, affects Safari on iOS/iPadOS 18.7.10, iOS/iPadOS 26.6.1, and macOS Tahoe 26.6.2; visiting malicious web content may crash Safari. CVSS 3.1 base score 4.3 (MEDIUM). No public exploit details provided.

CVE-2026-64784

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...