RHEL 8 : expat (RHSA-2026:64809)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64809 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...

CVE-2026-69368: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69325: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CVE-2026-72959: Heap-based Buffer Overflow

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

NewStart CGSL MAIN 7.02 : libxml2 Multiple Vulnerabilities (NS-SA-2026-0087)

The remote NewStart CGSL host, running version MAIN 7.02, has libxml2 packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an...

NewStart CGSL MAIN 7.02 : orc Vulnerability (NS-SA-2026-0108)

The remote NewStart CGSL host, running version MAIN 7.02, has orc packages installed that are affected by a vulnerability: - Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the...

EulerOS 2.0 SP12 : jbig2dec (EulerOS-SA-2026-3269)

According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...

CVE-2026-69307: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69787: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69272: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

CVE-2026-81352: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

PT-2026-88235

In a2dp vendor opus decoder decode packet of a2dp vendor opus decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88126

🚨 CVE-2026-83978 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

ALSA-2026:64799 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

Security update for libvirt (important)

openSUSE security update: security update for libvirt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21738-1 Rating: important References: bsc1274576 bsc1274946 bsc1275264 bsc1275265 bsc1275863 Cross-References: CVE-2026-18917 CVE-2026-61477...

ALSA-2026:64787 Moderate: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm LZMA, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fixes: xz: XZ Utils:...

CVE-2026-69614: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-73012: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-69489: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...