Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux versions 7, 8, 9, and 10, as well as Red Hat OpenShift Container Platform version 4, contain a buffer error vulnerability. This vulnerability stems from the multipath daemon in device-mapper-multipath failing to properly handle format strings ending with a percent sign...

Google Chrome < 156.0.8078.47 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 156.0.8078.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop02018666648 advisory. - Use after free in Performance. CVE-2026-113344 - Use after free i...

AlmaLinux 9 : kernel (ALSA-2026:86033)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:86033 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935...

RockyLinux 9 : tftp (RLSA-2026:80663)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:80663 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libsoup (UTSA-2026-142312)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142312 advisory. An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soupmultipartinputstreamreadheaders function inside...

AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792599160)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792599160 advisory. - A flaw was found in libsoup. The soupuridecodedatauri function incorrectly treated base64 data-URI payloads as NUL-terminated...

RHEL 9 : tftp (RHSA-2026:80663)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:80663 advisory. The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server...

PT-2026-135250

Out-of-bounds read in Recursor findScopeZero...

PT-2026-120545

An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC versions 1.11.0 through 1.17.0 on all platforms. A client that creates multiple streams in a single RPC expects the server response to carry exactly one extra stream id for every additional stream. The response...

Linux Distros Unpatched Vulnerability : CVE-2026-113026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromiu...

PT-2026-120569

The Discovery naming-service reply parser in Apache bRPC versions 1.18.0 calls RapidJSON object-only accessors FindMember on JSON values without first validating that those values are objects. A malformed Discovery response whose data/service members or instances list contain non-object entries...

PT-2026-120531

Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload. Root Cause: The HTTP/2 DATA frame handler...

Linux Distros Unpatched Vulnerability : CVE-2026-113199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-113333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HT...

Linux Distros Unpatched Vulnerability : CVE-2026-109274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when...

Apache bRPC buffer error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a buffer error vulnerability. This vulnerability arises from an out-of-bounds read during URL parsing and case-insensitive header lookup on platforms where plain char is unsigned e.g., ARM64, potentially allowing remote attackers to cause process...

ROS-20261021-73-0067

The vulnerabilities of the updateprocessglyphfragments and glyphcachefragmentput functions in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP are related to reading beyond the allowed range of memory. Exploiting these vulnerabilities could allow a remote attacker to cause service...

CVE-2025-71438

An out-of-bounds read in gfodfac4cfgdsiv1 /odf/descriptors.c in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

PT-2026-120845

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview data management pipeline capability or edit data management pipeline job capability could read or delete Data Management SPL2 preview jobs and results outside their ownership scope. The vulnerability is possible...