UBUNTU-CVE-2026-75141

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hv...

UBUNTU-CVE-2026-75142

FFmpeg before commit 9d786e4 contains a stack buffer overflow in the M...

UBUNTU-CVE-2026-75144

FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerabi...

Linux Distros Unpatched Vulnerability : CVE-2026-62291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alp...

PT-2026-79174

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-63633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdpdspdecodeopus in libfreerdp/codec/dsp.c calls...

PT-2026-79160

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a local attacker to gain elevated privileges. A heap buffer overflow occurs when a program writes more data to a heap-allocated memo...

PT-2026-79153

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a local attacker to gain elevated privileges. A heap-based buffer overflow occurs when a program writes more data to a heap...

Linux Distros Unpatched Vulnerability : CVE-2026-75143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader libavformat/librist.c. libristread ignored its size argument and copied...

PT-2026-79059

Name of the Vulnerable Software and Affected Versions SumatraPDF versions prior to 3.6.2 Description A crafted CHM file can provide malformed LZX Huffman code lengths to the make decode table function in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes via next...

PT-2026-79179

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read...

PT-2026-79259

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

UBUNTU-CVE-2026-69159

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior...

UBUNTU-CVE-2026-62291

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflow. TrackVisual::decodenextimagesample...

PT-2026-79193

Name of the Vulnerable Software and Affected Versions Capstone versions prior to 6.0.0-Alpha10 Description SH floating-point decoders, including opFADD, opFMUL, and opFSUB, call set reg and set reg n using sh info.op.op count without verifying the fixed-size operands array. When processing repeat...

Elasticsearch 8.19.x < 8.19.20 / 9.4.x < 9.4.5 / 9.5.x < 9.5.1 Multiple Vulnerabilities (ESA-2026-80 / ESA-2026-123)

The version of Elasticsearch installed on the remote host is 8.19.x prior to 8.19.20, or 9.4.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-80 and ESA-2026-123 advisories. - The native inference process that...

Linux Distros Unpatched Vulnerability : CVE-2026-63652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsndserverrecvformats in channels/rdpsnd/server/rdpsndmain.c frees...

CVE-2026-62291

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflow. TrackVisual::decodenextimagesample...

UBUNTU-CVE-2026-65609

nnn is vulnerable to Out-of-Bound write vulnerability.Due to lack of v...

PT-2026-79054

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...