RLSA-2026:80798 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc: Fi...

BOF-classic-Exploit-Calamity-RootScript

Calamity-RootScript Python exploit for HTB Calamity's "goodlu...

Information Disclosure

postgresql is vulnerable to information disclosure. The vulnerability is due to uninitialized buffer bytes being used to pad values shorter than their declared length, where SQL statements and parameter values from previous operations on the same connection can be stored in the database and expos...

MGASA-2026-0505 Updated freeciv package fixes security vulnerabilities

Freeciv before 3.2.6 Heap Buffer Overflow via worklistload. CVE-2026-90556 Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame. CVE-2026-90557...

Updated freeciv package fixes security vulnerabilities

Freeciv before 3.2.6 Heap Buffer Overflow via worklistload. CVE-2026-90556 Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame. CVE-2026-90557...

CVE-2026-110155

A buffer overflow flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570167922...

CVE-2026-110166

A buffer overflow flaw was found in the Animation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/566496747...

CVE-2026-110152

A buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567736859...

SUSE CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CLEANSTART-2026-WT42986 Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec

Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec...

CLEANSTART-2026-LU26408 Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec

Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec...

CLEANSTART-2026-PZ30924 Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec

Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec...

CLEANSTART-2026-EW60545 heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext

Security vulnerability affects the libjpeg-turbo package. A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext...

EUVD-2026-100646

Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-100658

Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-100625

Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

FreeBSD Security Advisory - FreeBSD-SA-26:70.tcp

FreeBSD Security Advisory - Remotely triggerable buffer overflow in tcprack. A remote attacker who can establish a TCP connection to a system using the RACK stack can trigger an out-of-bounds write of approximately 512 KB in the kernel heap possibly resulting in a kernel panic...

ROS-20261014-73-0011

The vulnerability of the loongsongpufixupdmahang function in the arch/loongarch/pci/pci.c module, which is part of the LoongArch architecture support for the Linux operating system, is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromi...

CVE-2026-102055: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause denial of service via a specific CFM Message sent t...

ROS-20261014-73-0057

The vulnerability of the vcnv40decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv40.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel relates to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access protected information or cause...