PT-2026-135451

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm caused by an unvalidated characters-per-pixel value in the XPM header. Attackers can supply a crafted XPM file with characters-per-pixel greater than 3 to overrun fixed 3-byte...

CVE-2026-8923: Zohocorp: Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated…

Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option...

PT-2026-135810

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution...

PT-2026-135405

Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option...

RHEL 9 : nginx (RHSA-2026:93467)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93467 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

CVE-2026-120436: Netpbm: Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that…

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbgdecmergeplanes overflows th...

bind security update

9.16.23-40.0.1.el98.13 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-40.13 - Fix CVE-2026-94300: Arbitrary code execution via GSS-TSIG UDP message replay. - Fix CVE-2026-97313: Denial of Service via assertion failure in RPZ query processing. - Fix CVE-2026-96888:...

LibreOffice Code Execution

The vulnerability in the LibreOffice office suite package is related to the inclusion of functions from an untrusted controlled area. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...

NGINX Plus/Open Source Code Execution

The vulnerability in the ngxhttpcoremodule of NGINX Plus and NGINX Open Source web servers is related to use-after-free memory allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service or execute arbitrary code...

Black Python Code Formatter Code Execution

The vulnerability in the Black Python code formatting tool is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code via a malicious peripheral device...

Google Chrome Microsoft Edge Code Execution

The vulnerability in the Views component of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code via a specially crafted HTML page...

ksmbd module Code Execution

The vulnerability in the ksmbd module of the SMB server implementation in Linux kernel is related to race conditions. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Apache OpenOffice Code Execution

The vulnerability in the Apache OpenOffice office suite package is related to the use of an untrusted search path. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

NGINX Plus/Open Source Module Code Execution

The vulnerability in the ngxhttpcoremodule of NGINX Plus and NGINX Open Source web servers is related to a heap-based buffer overflow. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service by sending a specially crafted HTTP request...

Google Chrome Microsoft Edge Code Execution

The vulnerability in the Compositing component of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code via a specially crafted HTML page...

Important: libXi security update

X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow CVE-2026-109089 For more details about the security issues, including the...

Important: libXi security update

X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow CVE-2026-109089 For more details about the security issues, including the...

PT-2026-135454

QuickJS-NG before 0.16.0 contains an integer overflow in js proxy get own property names in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the allocation size, causing crashes or...

Important: bind9.16 security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...