ALSA-2026:83552 Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and...

CVE-2026-108429: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-111273: Off-by-one Error

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in targetname in tar/parse-tar.c, reachable through the arentrygetname API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashi...

RHEL 10 : libsoup3 (RHSA-2026:83618)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83618 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup,...

UBUNTU-CVE-2026-101338

When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size. Zone files which are written out by NSD itself, such as for zones for which t...

Linux Distros Unpatched Vulnerability : CVE-2026-110837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channe...

Important: libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion CVE-2026-102556 libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly CVE-2026-102557 libsoup: libsoup:...

Rocky Linux 9 [CIQ] Security Update: librabbitmq / librabbitmq-debuginfo / librabbitmq-debugsource / etc (crlsa-2026_82094)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202682094 advisory. rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 Tenable has extracted the preceding description block directly from the CI...

PT-2026-114864

HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior...

UBUNTU-CVE-2026-93479

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...

HPE NonStop QIOMON input validation error vulnerability

The HPE NonStop QIOMON T8671L02^ABH and earlier versions contain an input validation error vulnerability stemming from an out-of-bounds write, which may lead to buffer data corruption...

Rocky Linux 9 [CIQ] Security Update: gd / gd-debuginfo / gd-debugsource / gd-devel (crlsa-2026_81517)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202681517 advisory. libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 Tenable has extracted the preceding description block directly from the CIQ securit...

AlmaLinux 8 : ghostscript (ALSA-2026:83552)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83552 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

CVE-2026-79828: Heap-based Buffer Overflow

A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow...

PT-2026-115170

UADE through 3.05 contains an out-of-bounds read vulnerability in uade filemagic in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing applicatio...

Windows GDI+ Code Execution

The vulnerability of the Windows GDI+ component of the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Reliable Multicast Transport Driver Code Execution

The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Graphics Component Windows Code Execution

The vulnerability of the Graphics Component component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-114986

Name of the Vulnerable Software and Affected Versions Wavlink WN530HG4B M30HG4B V260724 Description A heap-based buffer overflow exists in the api.cgi file. This issue allows a remote attacker to trigger the overflow via an unknown function. The vendor noted that the api=info&client=app handler...

Microsoft Office 365 Apps for Enterprise Buffer Overflow

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...