RHEL 9 : libxml2 (RHSA-2026:90309)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90309 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2:...

Apple MacOS: CVE-2026-112519: OS X update for Screen Sharing

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Connecting to a malicious VNC server may cause a denial-of-service...

PT-2026-125283

An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may result in memory corruption...

PT-2026-125133

An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption...

PT-2026-125152

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption...

PT-2026-125483

Name of the Vulnerable Software and Affected Versions flatcc versions prior to 0.6.5 Description An integer overflow exists in the check header function of the FlatBuffers verifier due to an overflow guard that acts as dead code. On 32-bit builds, an attacker can provide a crafted buffer offset...

The FLTK Team fltk digital error vulnerability

The FLTK Team’s fltk 1.4.5 and earlier versions contain a numerical error vulnerability. This vulnerability stems from an integer overflow in the FlBMPImage::loadbmp function, which results in the allocation of a pixel buffer with an excessively small width and height. Attackers can exploit this ...

Apple iOS numeric error vulnerability

A numerical error vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8, and Apple macOS Tahoe...

UBUNTU-CVE-2026-114645

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side...

CVE-2026-106676

The qiujie mall-server 0.0.1-SNAPSHOT version is vulnerable to an integer overflow within the CartServiceImpl component. This flaw allows an authenticated user to wrap a cart quantity to a negative value . Because the order creation flow lacks validation for this quantity, the negative value is p...

Qiujie Mall-Server security vulnerability

The qiujie mall-server 0.0.1-SNAPSHOT version contains a security vulnerability. This vulnerability stems from an integer overflow in CartServiceImpl; authenticated users can cause the number of shopping carts to become a negative value. Additionally, the order creation process fails to validate...

PT-2026-125261

An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination...

PT-2026-123304

Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parse integer/2 in...

RHEL 10 : libxml2 (RHSA-2026:89759)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89759 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

PT-2026-125226

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination...

CentOS Linux 7 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-demos / etc (CENTOS7:CLSA-2026:1792785441)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792785441 advisory. - A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when...

RHEL 8 : gcc (RHSA-2026:89830)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89830 advisory. The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security...

Linux Distros Unpatched Vulnerability : CVE-2026-116188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory accounting that bypasses the configured buff...

CentOS Linux 8 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1793029519)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1793029519 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow ...

CVE-2026-80909

A flaw was found in the Linux kernel's amdgpu driver. By sending a specially crafted Universal Video Decoder UVD message with an invalid number of H.265 references, a local attacker could trigger an integer overflow. This overflow could lead to a denial of service by causing a system crash or...