CVE-2026-101094

The Affinity by Canva application, prior to version 3.3.1 (October 2026 release), contains an unbounded over-read vulnerability in Story::GlyphString::Add . The issue stems from the software's failure to correctly handle incomplete UTF-8 character sequences while parsing text within Affinity docu...

EUVD-2026-95752

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...

CVE-2026-101094

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...

EUVD-2026-95751

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...

CVE-2026-96396

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...

CVE-2026-96396

The Affinity by Canva application for macOS versions prior to 3.3.1 (October 2026 release) is vulnerable to an integer overflow leading to a heap-based buffer overflow . The flaw occurs because the application does not safely calculate the size of an image buffer when generating QuickLook thumbna...

CVE-2020-8597

CVE-2020-8597 eap.c dans pppd dans ppp 2.4.2 à 2.4.8 présente un débordement de tampon rhostname dans les fonctions eaprequest et eapresponse. Si vous parvenez à obtenir "EAP: unauthenticated peer name" suffisamment long, il semble que mon client le limite à 255, vous pouvez provoquer un...

RLSA-2026:77690 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel: vsock/virtio: fix zerocopy completion for...

Security Bulletin: UPDATED security alert for multiple OpenSSL vulnerabilities impacting AIX. Updated On: Fri Oct 9 03:18:49 CDT 2026. Reason: Updated the iFix to include the previously missing OpenSSL 1.1 and 1.0.2 shared libraries.

Summary Vulnerabilities in OpenSSL could cause excessive memory consumption CVE-2026-54874, heap buffer overflow CVE-2026-63072, indefinite cache growth leading to denial of service CVE-2026-63074, invalid pointer dereference CVE-2026-63076, and authentication forgery CVE-2026-75803. OpenSSL is...

CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC تاريخ المشروع: فبراير 2026 / تم اكتشاف ثغرة تجاوز سعة المخزن المؤقت في معالج IOCTL لبرنامج تشغيل النواة pwdrvio.sys. تسمح الثغرة لمهاجم محلي غير مميز بإتلاف ذاكرة تجمع النواة، مما يؤدي إلى انهيار فوري للنظام BSOD ورفض الخدمة. 2026-02-09 تم إخطار البائع 2026-03-0...

CVE-2026-106432

A flaw was found in the MongoDB PHP Driver. In non-default runtime configurations permitting multi-gigabyte values, the BSON Binary JSON encoder converts large string lengths without validation, triggering an integer wrap and subsequent heap-based buffer overflow when encoding strings near four...

CVE-2026-27654-PoC

CVE‑2026‑27654 – إثبات مفهوم لمعالجة مسار DAV Alias في وحدة ngxhttpdavmodule في nginx يوفر هذا المستودع استغلالاً لإثبات المفهوم PoC لثغرة CVE‑2026‑27654 ، وهي ثغرة تجاوز سعة الكومة heap overflow في وحدة ngxhttpdavmodule الخاصة بـ nginx. ينشأ الخلل من تدفق سفلي لحجم sizet عند معالجة طلبات MOVE/CO...

Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-30892 DESCRIPTION: crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u --user is incorrectly...

Security Bulletin:Vulnerabilities exists in callhome of IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in security patch ina-release-callhomeimage-1.0.2.3. Vulnerability Details CVEID:CVE-2022-2042 DESCRIPTION: Use After Free in GitHub repository vim/vim prior to 8.2. CWE:CWE-416: Use After Free CVSS Source: IBM X-Forc...

CVE-2026-27280

Écriture hors limites dans dngrendertask::ProcessArea Adobe DNG SDK / Android Atteint depuis un fichier DNG ordinaire via l'API publique de décodage d'images d'Android , et reproduit sur un Galaxy S25 en utilisant le/system/lib64/libdngsdk.so du téléphone lui-même. Vulnérable : DNG SDK 1.7.1 buil...

kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

A flaw was found in the Linux kernel's SCSI target subsystem. This vulnerability, a buffer overflow, occurs in the tgptgpmembersshow function when processing long iSCSI IQN names. An attacker could potentially exploit this by providing a specially crafted input, leading to the disclosure of...

CVE-2026-98206

A flaw was found in the Linux kernel's Cypress Generation 5 touchscreen cyttsp5 driver. This vulnerability can lead to a Denial of Service DoS due to memory corruption because the driver does not properly validate the size of incoming data reports before copying them into a fixed-size buffer. A...

DEBIAN-CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-19571

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: ثغرة تنفيذ التعليمات عن بعد في Icecast 2.0.1 وتصعيد الصلاحيات في ويندوز المنصة: TryHackMe نظام التشغيل المستهدف: Windows 7 / Windows Server 2008 R2 الصعوبة: سهل الفئة: تجاوز سعة المخزن المؤقت تنفيذ التعليمات عن بعد، تصعيد الصلاحيات المحلي ملخص يُوثق هذا التقرير الاختراق الكامل...