PT-2026-86657

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.6.0 through 2.6.22 OpenVPN versions 2.7.0 through 2.7.6 Description Remote unauthenticated attackers can cause a denial of service by sending crafted inputs that trigger a timeout integer overflow during the retransmission o...

PT-2026-91342

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove crypto rng interface Since the crypto rng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

PT-2026-85711

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The sun8i-ss driver within the crypto subsystem contains a use-after-free issue in the generate function. This occurs because wait for completion interruptible timeout is used without...

CVE-2026-49509

CVE-2026-49509 is an out-of-bounds read vulnerability in Samsung Opensource Escargot , a JavaScript engine, that allows overread of buffers. The affected commit is 25648aef19187b3f87f4d9420b8d761453ad4630. The CNA-assigned CVSS 3.1 score is 4.4 (MEDIUM) , with a local attack vector, low complexit...

CVE-2026-49509

Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630...

CVE-2026-49509

Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630...

CVE-2026-49509

Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630...

PT-2026-85306

Out-of-bounds read vulnerability in Samsung Opensource Escargot allows Overread Buffers. This issue affects Escargot: 25648aef19187b3f87f4d9420b8d761453ad4630...

SUSE CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Media component in Google Chrome and Microsoft Edge browsers is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...

AZL-98102 CVE-2026-80631 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

The vulnerability of the QEMU hardware emulation software, related to reading data beyond the buffer’s acceptable limits, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to reading data from buffer files beyond acceptable limits. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

MiracleLinux 8 : mingw-openssl-1.0.2k-4.el8_10 (AXSA:2026-1682:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1682:01 advisory. openssl: SSLselectnextproto buffer overread CVE-2024-5535 Tenable has extracted the preceding description block directly from the MiracleLinux security...

SUSE-SU-2026:2641-1 Security update for apache2

This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in...

RLSA-2026:60329 Low: mingw-openssl security update

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This package contains Windows MinGW libraries and development tools. Security Fixes:...

mingw-openssl security update

An update is available for mingw-openssl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenSSL toolkit provides support for secure communications between...

mingw-openssl security update

Mon Aug 17 2026 Uri Lublin - Fix CVE-2024-5535 SSLselectnextproto buffer overread Resolves: RHEL-45673 1.0.2k-3 - Rebuilt Related: rhbz1846152...

RockyLinux 8 : mingw-openssl (RLSA-2026:60329)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:60329 advisory. openssl: SSLselectnextproto buffer overread CVE-2024-5535 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

Oracle Linux 8 : ELSA-2026-60329-0: / mingw-openssl (ELSA-2026-603290)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-603290 advisory. - Fix CVE-2024-5535 SSLselectnextproto buffer overread Resolves: RHEL-45673 Tenable has extracted the preceding description block directly from the Oracle Lin...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...