CVE-2026-92259: Integer Overflow or Wraparound

Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file. This issue affects Escargot: ac94df78493ee6fede286620d94f724e46b4d23...

CVE-2026-91962: Incorrect Calculation of Buffer Size

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

CVE-2026-91960: Integer Overflow or Wraparound

FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's StreamEnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer...

CVE-2026-91728: Integer Overflow or Wraparound

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Stable Channel Update for Desktop

The Stable channel has been updated to 153.0.8010.47/.48 for Windows and Mac and 153.0.8010.47 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Google Chrome < 153.0.8010.47 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 153.0.8010.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0541751186 advisory. - Use after free in Workers in Google Chrome prior to 153.0.8010.47...

Linux Distros Unpatched Vulnerability : CVE-2026-92248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer...

CVE-2026-92248: Integer Overflow or Wraparound

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

PT-2026-93146

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An integer overflow in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. An...

PT-2026-93164

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An integer overflow in the Compositing component allows a remote attacker to obtain cross-origin data by inducing a user to visit a crafted HTML page. Cross-origin data access occurs wh...

PT-2026-93211

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file-psd plugin. When the application generates a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the...

PT-2026-92079

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An integer overflow exists in the Stream EnsureRemainingCapacity function within WinPR. A remote attacker acting as a malicious RD Gateway peer can send a WebSocket Ping frame containing a crafted...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address CVE-2025-71127 kernel: KVM: nSVM: Always use vmcb01 in...

RHEL 8 : kernel (RHSA-2026:67468)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67468 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: EDAC/bluefield: Fix potential...

AlmaLinux 8 : kernel (ALSA-2026:67468)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67468 advisory. kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address CVE-2025-711...

AlmaLinux 8 : kernel-rt (ALSA-2026:67469)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67469 advisory. kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address CVE-2025-711...

kernel security update

4.18.0-553.163.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

ALSA-2026:67468 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address CVE-2025-71127 kernel: KVM: nSVM: Always use vmcb01 in...

ALSA-2026:67469 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast addre...

Security Bulletin: IBM DataPower Gateway affected by multiple vulnerabilities in GLib

Summary Multiple vulnerabilities were addressed in IBM DataPower Gateway version 11.0.0.2 Vulnerability Details CVEID:CVE-2025-14087 DESCRIPTION: A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential...