CVE-2026-46570

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsindexwalkdown in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata...

RHEL 8 : perl-DBI (RHSA-2026:77576)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:77576 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent...

Linux Distros Unpatched Vulnerability : CVE-2026-106304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-106231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-104045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumerati...

Linux Distros Unpatched Vulnerability : CVE-2026-80048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request...

CVE-2026-46572

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcuttail in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory...

Ubuntu 22.04 LTS / 24.04 LTS : FreeType vulnerability (USN-8881-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8881-1 advisory. It was discovered that FreeType had a flaw in its CID font loader. An attacker could possibly use this issue to cause FreeType to consume excessive...

Linux Distros Unpatched Vulnerability : CVE-2026-106258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted...

UBUNTU-CVE-2026-106588

n sshd in OpenSSH through 10.6, use of the macOS 27 or later SDK has the side effect of loss of sandboxing, which is potentially unexpected...

Linux Distros Unpatched Vulnerability : CVE-2026-104046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memo...

Linux Distros Unpatched Vulnerability : CVE-2026-106386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page...

CVE-2026-46571

A out-of-bounds read vulnerability exists in NTFS-3G before version 2026.7.7 within the ntfs_fix_file_name() function in libntfs-3g/reparse.c. An attacker can exploit this by crafting a malicious NTFS image to trigger a readlink on a corrupted file, potentially allowing them to read confidential ...

CVE-2026-42618

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file...

AlmaLinux 9.2 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc (ALMALINUX9.2:CLSA-2026:1791377791)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791377791 advisory. - When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-alloca...

Linux Distros Unpatched Vulnerability : CVE-2026-106202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-101258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell...

CVE-2026-103005

A flaw was found in Elasticsearch. An authenticated attacker with connector management privileges can create and access connector resources containing an excessively large description field, causing the cluster to allocate an uncontrolled amount of memory. This issue can exhaust available heap...

CVE-2026-103008

A flaw was found in Elasticsearch. An authenticated user with read access to an index can trigger unbounded recursion by submitting a request defining a scripted runtime field that generates deeply nested geometry structures. Because the server does not enforce a recursion depth limit when...

CVE-2026-102411

A flaw was found in Elasticsearch. An authenticated user with index template management privileges can cause a Denial of Service DoS by registering multiple template resources and requesting them together. Although size limits exist for individual metadata entries, the system does not restrict...