AlmaLinux 10 : openssl (ALSA-2026:67154)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67154 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when processi...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1839:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1839:01 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...

RockyLinux 9 : openssl (RLSA-2026:67165)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67165 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when processi...

RockyLinux 10 : openssl (RLSA-2026:67154)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67154 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when...

CVE-2026-55323: Heap-based Buffer Overflow

In gfbaseupdatefingerbase of gfbase.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92298

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap buffer overflow in the gf base update finger base function within gf base.c allows for an out-of-bounds write. This issue can be exploited to achieve loca...

Oracle Linux 10 : ELSA-2026-67314-0: / nginx (ELSA-2026-673140)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-673140 advisory. - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer...

CVE-2026-11728: Out-of-bounds Write

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in t...

CVE-2026-91953: Buffer Copy without Checking Size of Input

FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in negosendnegotiationrequest that fails to validate the LBLOADBALANCEINFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an...

CVE-2026-91953: Buffer Copy without Checking Size of Input

FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in negosendnegotiationrequest that fails to validate the LBLOADBALANCEINFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an...

PT-2026-92072

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description A heap buffer overflow occurs in the nego send negotiation request function due to a failure to validate the length of the LB LOAD BALANCE INFO field before writing it to a fixed 512-byte buffer. A...

PT-2026-92083

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description A heap-based buffer overflow occurs in the nego send negotiation request function when processing Server Redirection PDU Protocol Data Unit messages. A malicious RDP server can trigger this issue by...

PT-2026-98340

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560854538 Crash type: Heap-buffer-overflow READ 1 Crash state: md decode utf8 md label hash md lookup label hashtable...

PT-2026-92348

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow exists in the gf ta test set config function within the gf ta test.c file due to a logic error. This flaw allows for local escalation of privilege without...

PT-2026-92139

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.0.37 LTS IBM MQ versions 9.2.0.0 through 9.2.0.43 LTS IBM MQ versions 9.3.0.0 through 9.3.0.41 LTS IBM MQ versions 9.3.0.0 through 9.3.5.1 CD IBM MQ versions 9.4.0.0 through 9.4.0.25 LTS IBM MQ versions...

PT-2026-92326

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description A heap buffer overflow in the Cellular Modem allows for an out-of-bounds write. This flaw enables remote code execution from a proximal or adjacent position without requiring user...

PT-2026-92028

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 10.08.0 Description A heap-based buffer overflow exists in the JPEG 2000 output adapter within the base/sjpx openjpeg.c file. The issue occurs when processing a crafted PDF containing a JPEG 2000 image with...

CVE-2026-58679: Heap-based Buffer Overflow

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92291

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description A heap buffer overflow in the Cellular Modem allows for an out-of-bounds write. This issue can be exploited without user interaction to achieve remote escalation of privilege without...

Linux Distros Unpatched Vulnerability : CVE-2026-91953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in negosendnegotiationrequest that fails to validate the LBLOADBALANCEINFO field...