Security Updates for Microsoft Outlook Products C2R (August 2026)

The Microsoft Outlook Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-70329 - Heap-based buffer overflow in Microsof...

MiracleLinux 9 : httpd-2.4.62-13.el9_8.5 (AXSA:2026-1520:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1520:08 advisory. httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 Apache HTTP Server: modrewrite: Apache HTTP Server: Privilege Escalation via .htaccess file...

The vulnerability of the wireless/ti/wlcore/tx.c component of the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the wireless/ti/wlcore/tx.c component in the Linux operating system is related to a violation of the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-71858

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code or cause a denial of service due to improper bounds checking...

PT-2026-71816

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow...

Vulnerability of the kerberos_DecryptMessage() function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file of the RDP client FreeRDP, which allows a intruder to disclose sensitive information and cause a denial-of-service attack.

The vulnerability of the kerberosDecryptMessage function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information and cause denial-of-service attacks...

SUSE SLES15: himmelblau / himmelblau-sshd-config / himmelblau-sso / etc (SUSE-SU-2026:3576-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3576-1 advisory. Security fixes: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1...

RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:54659)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54659 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

PT-2026-71806

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...

PT-2026-71472

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 18.0 through 18.4 Description A heap buffer overflow exists in the pg stat statements module. This issue allows a query author to execute arbitrary code with the privileges of the operating system user running the database ...

PT-2026-71467

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A heap buffer overflow occurs in the to chartimestamptz...

CVE-2026-52048

MQTT v5 properties bounds check uses relative offset against absolute position...

Vulnerability in core server (CVE-2026-14679)

PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL...

Vulnerability in core server (CVE-2026-14670)

PostgreSQL plperl tied object heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL...

Vulnerability in core server (CVE-2026-14664)

PostgreSQL regexp heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006,...

PT-2026-71657

Name of the Vulnerable Software and Affected Versions rsync versions 3.2.3 through 3.4.x Description An out-of-bounds write exists in the parse size arg function. The issue occurs because the return value of snprintf is used as an index for a .bss-segment array without proper bounds checking. Whe...

Linux Distros Unpatched Vulnerability : CVE-2026-68451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field...

SUSE SLES15 Security Update : erlang26 (SUSE-SU-2026:3579-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3579-1 advisory. - CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache poisoning bsc1261726. - CVE-2026-42789: publickey application...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.14)

The version of AOS installed on the remote host is prior to 7.3.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.14 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

Linux Distros Unpatched Vulnerability : CVE-2026-19385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user runni...