PT-2026-76234

In WriteOnePNGImage of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory and memset allows for an out-of-bounds write later when PopShortPixel from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply ...

CVE-2026-44092: Improper Neutralization of CRLF Sequences

An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss...

kernel security, bug fix, and enhancement update

5.14.0-687.31.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

PT-2026-66419

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description The MQTT Service contains a Server-Side Request Forgery SSRF flaw. An unauthenticated remote attacker can send a malicious ID to the MQTT Broker, which allows the...

PT-2026-76243

A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data...

Linux net/packet/af_packet Heap Buffer Overflow DoS

The vulnerability of the packetdobind function in the net/packet/afpacket.c module of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

SMC Protocol Heap Buffer Overflow DoS

The vulnerability of the smctcpsynrecvsock function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

Linux net/sched act_csum buffer overflow

The vulnerability of the tcfcsumact function in the net/sched/actcsum.c module of the network/sched subsystem of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability may allow a remote attacker ...

NVME Driver Heap Buffer Overflow DoS

The vulnerability of the nvmepoll function in the nvmem/host/pci.c driver of the Linux operating system’s NVME kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Smb kernel Heap Buffer Overflow DoS

The vulnerability of the functions ksmbdclosefd and ksmbdreopendurablefd in the fs/smb/server/vfscache.c module of the Smb file system in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to...

Linux Kernel RxRPC Function Heap Buffer Overflow DoS

The vulnerability of the rxgkverifyresponse function in the net/rxrpc/rxgk.c module, which is part of the RxRPC session support for Linux operating systems, involves the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to...

Linux kernel amd.c init_amd_zen1 function Privilege Escalation

The vulnerability of the initamdzen1 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, is related to incorrect inter-process boundary removal of critical data. Exploiting this vulnerability could allow an attacker to...

Linux kernel x25_queue_rx_frame Heap Buffer Overflow DoS

The vulnerability of the x25queuerxframe function in the net/x25/x25in.c module, which is part of the Linux kernel’s networking functions, involves the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

PAK ViPNet Coordinator HW 4 Decompression Capabilities

Vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5, related to excessive capabilities for decompressing updates. Exploiting this vulnerability allows a malicious actor, operating with a pre-compromised network managemen...

Linux kernel s32ton() Heap Buffer Overflow

The vulnerability of the s32ton function in the drivers/hid/hid-core.c file of the Linux kernel’s input device subsystem driver is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Smb File System Heap Buffer Overflow DoS

The vulnerability of the smb2getea function in the fs/smb/server/smb2pdu.c file of the Smb kernel of the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

DRI driver Kernel Data Compromise

The vulnerability of the xepagefaultservice function in the drivers/gpu/drm/xe/xepagefault.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of operations outside the memory buffer. Exploiting this vulnerability could allow a remote...

nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator

A flaw was found in Node.js's node:sqlite module. This vulnerability allows a previously used database statement, which should have been reset, to be re-executed with new parameters. This could lead to unintended data modifications or integrity issues within the application...

CVE-2026-59084

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

CVE-2026-49844

A flaw was found in Apache Log4j API. This vulnerability occurs due to improper encoding of non-finite floating-point values during JSON serialization of MapMessages, leading to invalid JSON output. An attacker who can supply a non-finite value can exploit this to cause the affected logging layou...