CVE-2026-101310: Buffer Over-read

The HDA audio device model did not check for zero-length Buffer Descriptor List BDL entries when starting a stream. A zero-length entry caused an out-of-bounds read or write during DMA transfer processing. BDL fields were also subject to modification by the guest after validation. A malicious gue...

UBUNTU-CVE-2026-15176

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...

UBUNTU-CVE-2026-93479

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...

PT-2026-115170

UADE through 3.05 contains an out-of-bounds read vulnerability in uade filemagic in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing applicatio...

CVE-2026-79835: Improper Input Validation

A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server...

CVE-2026-108437: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-114966

A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash...

CVE-2026-108441: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-76661: Improper Input Validation

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data...

CVE-2026-108444: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

HPE NonStop OCAX buffer error vulnerability

The HPE NonStop OCAX T0892L01 AAP and earlier versions contain a buffer error vulnerability. This vulnerability stems from a heap buffer overflow, which may lead to address space corruption and potentially redirect execution flow...

PT-2026-115239

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. In Microsoft Office Word, this flaw...

UBUNTU-CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

wireshark security update

1:3.4.10-10.4 - Fix DoS via heap-based buffer overflow in SPDY dissector CVE-2026-95387 - Resolves: RHEL-272330 1:3.4.10-9.4 - Fix DoS vulnerability in H.245 protocol dissector CVE-2026-76927 - Resolves: RHEL-257656 1:3.4.10-9.3 - Fix DoS vulnerability in ESS protocol dissector CVE-2026-76919 -...

ghostscript security update

10.02.1-16.3 - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data 10.02.1-16.2 - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB wri...

ghostscript security update

9.27-19 - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via...

ghostscript security update

9.54.0-19.3 - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data 9.54.0-19.2 - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:4651-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4651-1 advisory. - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. - CVE-2025-14181:...

HPE NonStop Posix User Threads buffer error vulnerability

The HPE NonStop Posix User Threads T1280L02 ACG and earlier versions contain a buffer error vulnerability stemming from a heap buffer overflow, which may lead to arbitrary code execution...

HPE NonStop XABroker buffer error vulnerability

The HPE NonStop XABroker T0804L40 and earlier versions contain a buffer error vulnerability caused by a buffer overflow. This may lead to memory corruption and application crashes...