MiracleLinux 9 : nodejs:24 (AXSA:2026-1641:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1641:01 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash vi...

Konami's Metal Gear Online 3 contains a heap-based buffer overflow

Overview Konami's Metal Gear Online 3 video game contains a heap-based buffer overflow that can be triggered by an input‑validation vulnerability that allows match hosts to remotely execute arbitrary code on lobby members' machines through specially crafted data. Description Metal Gear Online 3 i...

RHEL 9 : freerdp (RHSA-2026:58712)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58712 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

PT-2026-80884

A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...

CVE-2026-56135

CVE-2026-56135 is a heap-based buffer overflow in the build_inherited_id() function of libntfs-3g/security.c, affecting NTFS-3G through 2026.2.25 . An attacker can trigger the overflow by crafting a malicious NTFS image and creating a file within a crafted directory, leading to heap memory corrup...

PT-2026-79806

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the strcpy function in the '/goform/aspRemoteApConfTempSend'...

RHEL 9 : freerdp (RHSA-2026:58713)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58713 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

ROS-20260824-73-0004

The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

ROS-20260824-73-0010

The vulnerability of the rpcclientrecvfragment function in the libfreerdp/core/gateway/rpcclient.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures and execute arbitrary code...

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

RHEL 10 : freerdp (RHSA-2026:58711)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58711 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

ALSA-2026:59152 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

ALSA-2026:59097 Important: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow...

python-pyasn1 security update

0.6.2-1.1 - Fix CVE-2026-59886: prevent overflow in Real.float when converting ASN.1 Real values with large exponents Resolves: RHEL-217904...

CVE-2026-52492

CVE-2026-52492 affects the libtiff rgb2ycbcr utility. An integer overflow in the cvtRaster() function when computing strip buffer sizes leads to an undersized heap allocation, which can cause a heap-based buffer overflow during YCbCr conversion of a crafted TIFF image, potentially enabling arbitr...

PT-2026-80885

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

PT-2026-80907

Name of the Vulnerable Software and Affected Versions Netis NC63 versions prior to V3.0.0.3327 Description A stack-based buffer overflow exists in the login handler of the '/bin/netis.cgi' endpoint. The issue occurs because the custom Base64 decoder fails to validate the output length against a...

The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of an operation exceeding the buffer boundaries in memory, which allows a hacker to trigger a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the `CompositeDeepScanLine::readPixels` function in the ImfCompositeDeepScanLine component of image storage software for OpenEXR images with a wide dynamic range of brightness levels allows a hacker to cause a service failure.

The vulnerability of the CompositeDeepScanLine::readPixels function in the ImfCompositeDeepScanLine component of software for storing images with a wide dynamic range of brightness, OpenEXR, is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker ...