CVE-2025-71438

An out-of-bounds read in gfodfac4cfgdsiv1 /odf/descriptors.c in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

Linux Distros Unpatched Vulnerability : CVE-2026-113051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page...

PT-2026-120531

Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload. Root Cause: The HTTP/2 DATA frame handler...

Linux Distros Unpatched Vulnerability : CVE-2026-113050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-95114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-103658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserv...

PT-2026-120713

Name of the Vulnerable Software and Affected Versions Electron versions prior to 42.11.6 Electron versions prior to 43.7.3 Electron versions prior to 44.4.3 Electron versions prior to 45.0.0-alpha.9 Description Frame data received from the GPU process for the webContents.beginFrameSubscription...

Unity Linux 20.1070a Security Update: perl-XML-LibXML (UTSA-2026-141777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141777 advisory. XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending...

Linux Distros Unpatched Vulnerability : CVE-2026-113102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page...

PT-2026-120169

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF DIB synthesis because winpr read png from buffer allocates a bit-packed buffer for PNGs with bit depth below 8, while winpr bitmap write buffer copies rows assuming one byte per pixel. A malicious RDP...

hMailServer authorization issue vulnerability

Versions 6.2.25 through 6.3.6 of hMailServer contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in REST metric routing; it allows remote authenticated users with credentials restricted to named domains to read server-wide traffic history via...

RockyLinux 8 : perl-DBI:1.641 (RLSA-2026:85916)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85916 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...

AlmaLinux 9 : kernel (ALSA-2026:86033)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:86033 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935...

Linux Distros Unpatched Vulnerability : CVE-2026-103119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request...

Linux Distros Unpatched Vulnerability : CVE-2026-113333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HT...

AlmaLinux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792572593)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792572593 advisory. - An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size...

RHEL 9 : openexr (RHSA-2026:86983)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:86983 advisory. OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document...

RockyLinux 9 : openexr (RLSA-2026:86983)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86983 advisory. openexr: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 openexr: OpenEXR: Denial of Service or...

ALSA-2026:86983 Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

Rocky Linux 10.2 [CIQ] Security Update: openexr / openexr-debuginfo / openexr-debugsource / openexr-devel / etc Multiple Vulnerabilities (crlsa-2026_84796)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684796 advisory. OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 OpenEXR: OpenEXR: Out-of-bounds write...