CVE-2026-74990

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird E...

Photon OS 5.0: Postgresql15 PHSA-2026-5.0-92-0959

An update of the postgresql15 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0959. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RockyLinux 8 : gstreamer1-plugins-bad-free (RLSA-2026:56521)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:56521 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 Tenable has extracted the preceding...

CVE-2026-75976

TRENDnet TEW-823DRU router firmware 1.1.02b01 contains a stack-based buffer overflow in the strcpy call within /cgi-bin/wan.cgi (NVRAM component), triggered by the wan_l2tp_password argument. CVSS 9.9 (CRITICAL) reflects remote, unauthenticated-exploitable complete confidentiality/integrity/avail...

CVE-2026-75976 TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wanl2tppassword causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been ma...

MINI-MPRX-XG7H-2RGP

Bulletin has no description...

MINI-5M3X-HF5M-W8PH

Bulletin has no description...

CVE-2026-53423

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:35+00:00| published-proof-of-concept| https://github.com/membraneframework/membranemp4plugin/security/advisories/GHSA-43hj-fxwj-49qw...

CVE-2026-70921

creationtimestamp| type| source ---|---|--- 2026-08-18 22:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfas4vv4m2c 2026-08-18 22:23:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaxqzrld2b 2026-08-19 17:51:55+00:00| seen|...

DEBIAN-CVE-2026-62377

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the context with no registered sequence tracks and crash when heifcontextgettrackctx, 0 is called. HeifContext::gettrack in libheif/context.cc...

CVE-2026-76046

Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-76046

Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-76036

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-76036

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-76034

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-76034

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-50142

libheif 1.19.0–1.23.0 is vulnerable to denial-of-service via crafted HEIF sequences: Box_stsz::parse() omits bound checks in fixed-size mode, and Track::load() 32-bit arithmetic wraparound bypasses consistency checks, allowing multi-gigabyte allocations. No in-the-wild exploitation reported. Fixe...

CVE-2026-59250

A flaw was found in the Erlang/OTP megaco flex scanner C driver. A remote, unauthenticated attacker can exploit a buffer overflow vulnerability by sending a specially crafted H.248/Megaco message with an oversized property parameter name. This can lead to memory corruption, potentially allowing f...

CVE-2026-76046

Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76046

Affected component: ANGLE (Android graphics layer) in Google Chrome on Android, prior to version 151.0.7922.169. Root cause: Buffer overflow triggered by a crafted HTML page. Impact: A remote attacker with a compromised renderer process can execute arbitrary code outside the Chrome sandbox. CVSS ...