GO-2026-6237 vulnerabilities

Vulnerabilities for packages: kube-vip, cni-plugins...

CVE-2026-3441 vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-H668-6X6G-F8R5 vulnerabilities

Vulnerabilities for packages: ascan...

CVE-2026-4647 vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-J3RV-75WM-77RM vulnerabilities

Vulnerabilities for packages: binutils...

PT-2026-79110

msgpack unpacker expand buffer in src/unpack.c, reached through the public msgpack unpacker reserve buffer API, computes its new buffer size using an unchecked size t addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but...

PT-2026-79050

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4 decompress saf...

PT-2026-79141

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...

PT-2026-79174

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-63633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdpdspdecodeopus in libfreerdp/codec/dsp.c calls...

PT-2026-79142

Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3 Description When built with libultrahdr support, the library can incorrectly size an output buffer within the vips foreign save uhdr set raw hdr function in libvips/foreign/uhdrsave.c. This occurs when a pipeli...

Linux Distros Unpatched Vulnerability : CVE-2026-75141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single...

Linux Distros Unpatched Vulnerability : CVE-2026-75144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer libavformat/rtpencvc2hq.c that allows attackers to...

Elasticsearch 8.11.x < 8.18.0 DoS (ESA-2026-111)

The version of Elasticsearch installed on the remote host is 8.11.x prior to 8.18.0. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-111 advisory. - Memory Allocation with Excessive Size Value CWE-789 in the ES|QL query processing of Elasticsearch can lead to denial of...

PT-2026-79034

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-62291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alp...

UBUNTU-CVE-2026-75141

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hv...

UBUNTU-CVE-2026-75142

FFmpeg before commit 9d786e4 contains a stack buffer overflow in the M...

UBUNTU-CVE-2026-75144

FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerabi...

PT-2026-79193

Name of the Vulnerable Software and Affected Versions Capstone versions prior to 6.0.0-Alpha10 Description SH floating-point decoders, including opFADD, opFMUL, and opFSUB, call set reg and set reg n using sh info.op.op count without verifying the fixed-size operands array. When processing repeat...