Linux Distros Unpatched Vulnerability : CVE-2026-112260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out- of-bounds read, disclosing adjacent heap data into...

Linux Distros Unpatched Vulnerability : CVE-2026-98531

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: sr: enforce exact attribute length for SEG6ATTRDST In seg6genlpolicy, SEG6ATTRDST is defined with .type = NLABINARY and .len = sizeofstruct in6addr. For...

Linux Distros Unpatched Vulnerability : CVE-2026-112052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in...

Linux Distros Unpatched Vulnerability : CVE-2026-112271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's...

PT-2026-117430

Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve...

PT-2026-117664

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the PSD thumbnail resource loader that performs a BGR-to-RGB channel swap using a fixed 3-byte stride without verifying if the JPEG thumbnail is RGB. A specially crafted graysca...

RHEL 8 : kernel (RHSA-2026:85000)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85000 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Servi...

RHEL 8 : kernel (RHSA-2026:84677)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84677 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfnetlinkcthelper:...

GIMP buffer error vulnerability

GIMP has a buffer error vulnerability. This vulnerability stems from the PSD thumbnail loader using a fixed 3-byte step for BGR-to-RGB channel swapping, without verifying whether the JPEG thumbnail is in RGB format. Specialized grayscale PSD thumbnails can lead to out-of-bound read and write...

CVE-2026-112282: Out-of-bounds Read

VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpiaccesspoint that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with numepfine set to zero and an...

PT-2026-117418

libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa record::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causi...

Linux Distros Unpatched Vulnerability : CVE-2026-98457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: validate frame length before control and FCS access l2capdatarcv unpacks either a two-byte or four-byte control field without first ensuring...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to reading beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...

AlmaLinux 8 : webkit2gtk3 (ALSA-2026:84584)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:84584 advisory. chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Google...

ALSA-2026:84591 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-772...

PT-2026-117649

Name of the Vulnerable Software and Affected Versions Pillow versions 8.2.0 through 12.x.x Description The tiled-TIFF decoder in the libImaging module contains a memory corruption issue. When processing tiled TIFF images, the decodeTile function allocates a buffer based on the tile size reported ...

Linux Distros Unpatched Vulnerability : CVE-2026-98532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: do not let ipv6findhdr return an offset past the packet end ipv6findhdr walks the extension header chain, skipping each header by the length that header...

CVE-2026-112271: Out-of-bounds Read

libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to...

PT-2026-117506

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

PT-2026-117449

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows authenticated attackers to bypass permission checks due to an inverted comparison logic in AbstractCockpitPluginResource.isPermissionDisabled. Attackers with...