Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked; only offset is capped to 40 bits, which can be used to read/write out of bounds of the device...

Astra Linux – Vulnerability in Chromium

In Blink, the "Out of bounds read and write" vulnerability in InterestGroups in Google Chrome before version 149.0.7827.197 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mtdchar: fix integer overflow in read/write ioctls The “req.start” and “req.len” variables are u64 values provided by the user at the beginning of the function. We mask off the high 32 bits of “req.len” so that it is capped at...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939sockslock to rwlock The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report: - j1939sockslock - activesessionlistlock -...

CVE-2026-76664

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations...

CVE-2026-76664

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations . Impacting various components, this vulnerability could lead to Denial of Service (DoS) , memory corruption, Buffer Overflow, or Stack Overflow. HPE has released fixes for the affected version...

CVE-2026-76664 HPE NonStop EXPAND - Out-of-Bounds memory read/write

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations...

PT-2026-114762

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations...

RHEL 10 : tftp (RHSA-2026:82280)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82280 advisory. The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-serve...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tftp (UTSA-2026-130162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130162 advisory. A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass...

EUVD-2026-101518

Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's connect path in redash/queryrunner/duckdb.py created connections with enableexternalaccess left at its default value of true. A user with query access to an administrator-created DuckDB dat...

CVE-2026-77371 Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access

Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's connect path in redash/queryrunner/duckdb.py created connections with enableexternalaccess left at its default value of true. A user with query access to an administrator-created DuckDB dat...

CVE-2026-100236

A heap out-of-bounds read/write vulnerability exists in the DPDK GSO library . The issue occurs because the software GSO fails to verify if a packet header fits within the source first segment or the destination buffer during a copy to a new mbuf. A header exceeding the configured GSO segment siz...

HPE NonStop EXPAND buffer error vulnerability

The HPE NonStop EXPAND T9057L02^AIG and earlier versions contain a buffer error vulnerability stemming from out-of-bounds memory read/write operations...

Labs64 NetLicensing MCP Server path traversal vulnerability

Labs64 NetLicensing MCP Server versions prior to 0.1.8 have a path traversal vulnerability. This vulnerability stems from the use of netlicensinggetproduct, which passes the productnumber controlled by the caller into src/netlicensingmcp/tools/products.py. Without path segment validation, this...

Exploit for Type Confusion in Google Chrome

CVE-2021-30517 PoC - Write-up: https://jamezx32.github.i...

AlmaLinux 10 : tftp (ALSA-2026:82280)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:82280 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly...

MiracleLinux 8 : tftp-5.2-28.el8_10.ML.1 (AXSA:2026-2039:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2039:01 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block direct...

Rocky Linux 10.2 [CIQ] Security Update: tftp / tftp-debuginfo / tftp-debugsource / tftp-server / etc (crlsa-2026_82280)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202682280 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly...

MiracleLinux 9 : tftp-5.2-40.el9_8.1 (AXSA:2026-2044:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2044:02 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block direct...