PT-2026-113909

🚨 CVE-2026-102069 A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via...

Linux Distros Unpatched Vulnerability : CVE-2026-110155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

nginx -- multiple vulnerabilities

The nginx developers report: A buffer overflow might occur in a worker process when using the "alias" directive if the request URI was changed by the "rewrite" directive and was then mapped to a file path CVE-2026-15176. A buffer overflow might occur in a worker process while evaluating string...

ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

Microsoft Exchange Server Buffer Overflow RCE

The vulnerability of Microsoft Exchange Server’s mail server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-114382

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 boot process where a command line may occupy nearly the entire COMMAND LINE SIZE. In this scenario, the append ipl block parm function passes a zero size to I...

UBUNTU-CVE-2017-20286

DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...

Rocky Linux 9 [CIQ] Security Update: compat-openssl11 / compat-openssl11-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_80514)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202680514 advisory. openssl: heap buffer overflow in CMS key unwrapping CVE-2026-63072 openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset...

SUSE SLES12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2026:4633-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4633-1 advisory. - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage...

Security Updates for Microsoft Visio Products C2R (October 2026)

The Microsoft Visio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. CVE-2026-102855, CVE-2026-102856, CVE-2026-102857 Note that...

Security Updates for Microsoft SQL Server (October 2026)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. CVE-2026-65674 - Heap-based buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-86476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane...

Rocky Linux 9 [CIQ] Security Update: flatpak / flatpak-debuginfo / flatpak-debugsource / flatpak-devel / etc Multiple Vulnerabilities (crlsa-2026_80497)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202680497 advisory. flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data...

Unity Linux 20.1070a Security Update: expat (UTSA-2026-130148)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130148 advisory. In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is...

RockyLinux 9 : librabbitmq (RLSA-2026:82094)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:82094 advisory. rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 Tenable has extracted the preceding description block directly from the...

Security Updates for Microsoft Outlook Products C2R (October 2026)

The Microsoft Outlook Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-70242, CVE-2026-70256, CVE-2026-70257,...

Linux Distros Unpatched Vulnerability : CVE-2026-109940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2026-130042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130042 advisory. In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. Tenable has extracted the preceding descripti...

Samsung One UI 8.5 DNG Heap Buffer Overflow

Samsung One UI version 8.5 contains a heap buffer overflow in libimagecodec.quram.so when decoding a crafted uncompressed tiled DNG image. The supplied proof of concept triggers the vulnerable Transparency Mask decoding path. https://packetstorm.news/download/235647...

Oracle Linux 9 : libreoffice (ELSA-2026-82013)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82013 advisory. - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow...