Red Hat: CVE-2026-112257: gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033)

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

RHEL 10 : kernel (RHSA-2026:85321)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85321 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.31 contains a security vulnerability. This vulnerability stems from the genericsetcmd and genericgetcmd functions in the usbgadget fuac1legacy module, which do not validate the bRequest index. They use the low half byte of ctrl-bRequest as the index for con-data, wher...

Security update for ntfs-3g_ntfsprogs (moderate)

openSUSE security update: security update for ntfs-3gntfsprogs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22053-1 Rating: moderate References: bsc1281756 bsc1281757 bsc1281758 bsc1281759 bsc1281760 bsc1281761 bsc1281762 bsc1281763 Affected...

yova_ps5

YOVA PS5 - Relapse Exploit Suite YOVA PS5 is a modern, hi...

CLSA-2026-1790583885 xorg-x11-server: Fix of 5 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...

CLSA-2026-1790584501 xorg-x11-server: Fix of 6 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...

CLSA-2026-1790585169 xorg-x11-server: Fix of 6 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...

CVE-2026-105958

A flaw in spice-server allows an authenticated SPICE client to perform out-of-bounds read and write operations during VM live migration. The vulnerability exists because multiple migration data handlers fail to perform bounds validation on client-supplied offsets from SPICE_MSGC_MIGRATE_DATA mess...

CVE-2026-105958 Spice-server: spice: heap oob read/write via unchecked migration data offsets

A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICEMSGCMIGRATEDATA messages without bounds validation, allowing a malicious authenticated SPICE client during VM live migration to read arbitrary heap memory or trigger heap corruption via...

Path Traversal (Arbitrary Read/Write) postcss Dependency in Confluence Data Center

This High severity Path Traversal Arbitrary Read/Write vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Path Traversal Arbitrary Read/Write vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

Astra Linux – vulnerability in qemu

A flaw was found in qemu. A host privilege escalation issue was identified in the virtio-fs shared file system daemon; a privileged guest user can create a device-specific file in the shared directory and use it to gain read/write access to host devices...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: fs/aio: Restricted kiocbsetcancelfn to I/O submitted via libaio. If kiocbsetcancelfn is called for I/O submitted via iouring, the following kernel warning appears: WARNING: CPU: 3 PID: 368 at fs/aio.c:598 kiocbsetcancelfn+0x9c/0x...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: comedi: Make insnrwemulatebits do insn-n samples The insnrwemulatebits function serves as the default handler for INSNREAD instructions on subdevices that have a handler for INSNBITS but not for INSNREAD. Similarly, it acts as th...

Astra Linux – vulnerability in ntfs-3g

A file handle created in fuselibopendir and subsequently used in fuselibreaddir allows arbitrary read and write operations to memory in NTFS-3G up to and including version 2021.8.22 when libfuse-lite is in use...

Astra Linux – vulnerability in Chromium

Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Type confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: 9p/transfd: always use ONONBLOCK read/write syzbot is reporting a hang task at p9fdclose 1, specifically for p9muxpollstop caused by p9fdclose from p9conndestroy. This fails to interrupt already started kernelread calls from...

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, and watchOS 10.5. An attacker with arbitrary read and write capabilities may be able to bypass Pointer Authentication...

Astra Linux – vulnerability in net-snmp

Net-SNMP provides various tools related to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials could exploit an improper input validation vulnerability by setting malformed OIDs in both the master agent and subagent simultaneously. Version 5.9.2...