Linux Distros Unpatched Vulnerability : CVE-2026-109274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when...

Linux Distros Unpatched Vulnerability : CVE-2026-113341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpcap (UTSA-2026-142316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142316 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BP...

Linux Distros Unpatched Vulnerability : CVE-2026-113026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142331 advisory. An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a Tenable has extracted the preceding description block directly from the...

Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792572593)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792572593 advisory. - An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size...

PT-2026-120773

The user-mode verifier for the peci transfer system call, z vrfy peci transfer in drivers/peci/peci handlers.c, checked only the device object permission and copied the caller-supplied struct peci msg with k usermode from copy. That copy validates the outer structure only; the buf pointers and le...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142326 advisory. An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. Tenable ha...

RHEL 8 : perl-DBI:1.641 (RHSA-2026:85916)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:85916 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent...

Apache bRPC buffer error vulnerability

Versions 1.11.0 through 1.17.0 of Apache bRPC contain a buffer error vulnerability. This vulnerability arises because the streaming RPC client fails to validate the size of the returned list of extrastreamids prior to processing StreamSettings responses. It then returns identifiers by using a loc...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: expat (UTSA-2026-142320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142320 advisory. Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers...

Pillow buffer error vulnerability

Versions 11.0.0 through 13.0.0 of Pillow contain a buffer error vulnerability. This vulnerability arises because the multi-frame loader reuses unvalidated modes and dimensions from expired ImagingCore native storage when changing the logical mode of subsequent frames and decoding data. Specialize...

RockyLinux 9 : openexr (RLSA-2026:86983)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86983 advisory. openexr: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 openexr: OpenEXR: Denial of Service or...

Rocky Linux 10.2 [CIQ] Security Update: openexr / openexr-debuginfo / openexr-debugsource / openexr-devel / etc Multiple Vulnerabilities (crlsa-2026_84796)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684796 advisory. OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 OpenEXR: OpenEXR: Out-of-bounds write...

Linux Distros Unpatched Vulnerability : CVE-2026-109281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds o...

Linux Distros Unpatched Vulnerability : CVE-2026-113868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could sen...

Unity Linux 20.1070a Security Update: libXpm (UTSA-2026-141774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141774 advisory. A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local attacker to trigger an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142325 advisory. An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...

Linux Distros Unpatched Vulnerability : CVE-2026-109253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length before consuming...

RockyLinux 8 : emacs (RLSA-2026:80506)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80506 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the use...