CVE-2026-76661: Improper Input Validation

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data...

CVE-2026-79838: Stack-based Buffer Overflow

A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash...

CVE-2026-108444: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

PT-2026-115324

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-base versions prior to 1.28.8 GStreamer gst-plugins-good versions prior to 1.28.8 Description A heap-based buffer overflow exists in the RTP L8, L16, and L24 audio depayloaders. This issue can be triggered via crafted RTS...

PT-2026-114437

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data...

CVE-2026-73799: Stack-based Buffer Overflow

A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption...

AlmaLinux 9 : kernel (ALSA-2026:81552)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:81552 advisory. kernel: drm/xe/uapi: Reject cohnone PAT index for CPU cached memory in madvise CVE-2026-46309 kernel: macsec: fix replay protection at XPN lower-PN wrap...

RHEL 9 : librabbitmq (RHSA-2026:82094)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82094 advisory. The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using...

MiracleLinux 8 : glibc-2.28-251.el8_10.48 (AXSA:2026-2058:14)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2058:14 advisory. glibc: Fix out-of-bounds array write in tdelete CVE-2026-19542 glibc: Non-progress DoS in SHIFTJISX0213 - CVE-2026-77117 glibc: Non-progress DoS in...

RockyLinux 10 : hplip (RLSA-2026:82883)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:82883 advisory. hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple vulnerabilities enabling local code execution and...

Rocky Linux 8 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_80817)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202680817 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-196...

AlmaLinux 9 : libsoup (ALSA-2026:83384)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83384 advisory. libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion CVE-2026-102556 libsoup: libsoup: Heap buffer overflow during WebSocket...

MiracleLinux 9 : glibc-2.34-283.el9_8 (AXSA:2026-2040:13)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2040:13 advisory. glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791 glibc: glibc: Process abort due to invalid memory in worde...

Unity Linux 20.1070e Security Update: glibc (UTSA-2026-130364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130364 advisory. Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack,...

RHEL 9 : ghostscript (RHSA-2026:83553)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83553 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitma...

Unity Linux 20.1070e Security Update: libsoup (UTSA-2026-130370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130370 advisory. A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soupheadersparse can cause...

Rocky Linux 9 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (crlsa-2026_82013)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202682013 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

Oracle Linux 10 : libsoup3 (ELSA-2026-83618)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83618 advisory. - CVE-2026-102557 libsoup3: libsoup: Heap buffer overflow during WebSocket message reassembly - CVE-2026-102556 libsoup3: libsoup: Heap buffer overfl...

Microsoft Windows Raw Image Extension < 2.4.36.0 / 2.5.35.0 RCE (October 2026)

The Windows 'Raw Image Extension' app installed on the remote host is prior to 2.4.36.0 2.5.35.0 on Windows 11 versions 21H2 and 26H2. It is, therefore, affected by multiple remote code execution vulnerabilities: - A heap-based buffer overflow vulnerability exists in the losslessjpegloadraw...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:4651-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4651-1 advisory. - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. - CVE-2025-14181:...