BIT-POSTGRESQL-2026-14664 PostgreSQL regexp heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

CVE-2026-76036

A flaw was found in Dawn in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

USN-8093-2 libssh vulnerability

USN-8093-1 fixed a vulnerability in libssh. This update provides the corresponsing fix for Ubuntu 26.04 LTS. Original advisory details: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a client application queried extension data out of bounds...

CVE-2026-58082

The ISO-2022 encoding module in FreeBSD's iconv(3) allocates a 6-byte stack buffer (MB_LEN_MAX) but some variants require up to 10 bytes per character, causing up to a 4-byte stack overflow. Affects all supported FreeBSD versions; patched in stable/14 and stable/15 branches on 2026-06-30. No work...

CVE-2026-58081

CVE-2026-58081 affects the iconv(3) character encoding conversion library in FreeBSD . Several encoding modules—HZ, UTF-7, VIQR, and ZW —did not properly validate the size of the caller-supplied output buffer before writing converted characters. An application using iconv(3) to convert untrusted ...

CVE-2026-49420

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traffic from inside a NAT gateway using libalias can overflow a...

EUVD-2026-62242

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traffic from inside a NAT gateway using libalias can overflow a...

CVE-2026-49420 Buffer overflow in libalias RTSP handler

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traffic from inside a NAT gateway using libalias can overflow a...

CVE-2026-49420 Buffer overflow in libalias RTSP handler

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traffic from inside a NAT gateway using libalias can overflow a...

CVE-2026-49420

The RTSP handler in FreeBSD's libalias library writes rewritten packets into a fixed-length stack buffer without bounds checks, enabling a stack buffer overflow triggered by crafted RTSP traffic on NAT ports 554/7070, leading to RCE in the kernel (ipfw(4) NAT) or root-owned natd(8) process. Worka...

CVE-2026-76043

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:45+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824...

CVE-2026-76037

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:24+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824 2026-08-24...

CVE-2026-74984

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:03+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74965

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:18+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 06:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtimzto5x324...

CVE-2026-74952

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:49+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtiopiigbj2h...

CVE-2026-74950

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:44+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 10:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtiyrebqr723...

CVE-2026-74948

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2026-76008

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function getparafromuri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipulation of the argument width/height causes stack-based buffer overflow. The attack can be initiated remotely...