RHEL 9 : openexr (RHSA-2026:86983)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:86983 advisory. OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142326 advisory. An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. Tenable ha...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142333)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142333 advisory. An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-113295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpcap (UTSA-2026-142316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142316 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BP...

PT-2026-120209

Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that allows authenticated tenants to escape their object key prefix through an unsanitized filename splat segment. Attackers holding one valid API key can supply ../ sequences ...

Linux Distros Unpatched Vulnerability : CVE-2026-113304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromiu...

Linux Distros Unpatched Vulnerability : CVE-2026-113098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-113277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-113051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page...

PT-2026-120531

Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload. Root Cause: The HTTP/2 DATA frame handler...

Linux Distros Unpatched Vulnerability : CVE-2026-113050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium...

PT-2026-120713

Name of the Vulnerable Software and Affected Versions Electron versions prior to 42.11.6 Electron versions prior to 43.7.3 Electron versions prior to 44.4.3 Electron versions prior to 45.0.0-alpha.9 Description Frame data received from the GPU process for the webContents.beginFrameSubscription...

Linux Distros Unpatched Vulnerability : CVE-2026-113333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HT...

ALSA-2026:86983 Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

Apache bRPC buffer error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a buffer error vulnerability. This vulnerability arises because the Discovery naming service reply parser fails to validate whether JSON values represent objects before invoking the RapidJSON accessor, which is designed solely for objects. When...

EUVD-2025-211148

An out-of-bounds read in gfodfac4cfgdsiv1 /odf/descriptors.c in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

CVE-2025-71438

An out-of-bounds read in gfodfac4cfgdsiv1 /odf/descriptors.c in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

CVE-2025-71438

An out-of-bounds read vulnerability exists in the gf_odf_ac4_cfg_dsi_v1 function (located in /odf/descriptors.c) of the GPAC Project/MP4Box software before version v26.07.0 . An attacker can exploit this flaw by providing a crafted AC4 file to trigger a Denial of Service (DoS) . While the vulnera...