RHEL 10 : pipewire (RHSA-2026:47083)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47083 advisory. PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: PipeWire: Sandbox escape and arbitrary...

CVE-2026-51254

CVE-2026-51254 is rejected/not used; this record does not represent an active vulnerability.

PT-2026-65555

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...

PT-2026-65556

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...

CVE-2026-51261

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

EUVD-2026-49928

In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the ID3 tag parsing function showID3Tag of the embedded audio streaming library. The program reads untrusted long ID3 tag value from malicious audio files and uses unbounded appendf to write formatted strin...

PT-2026-65554

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Untrusted Search Path issue exists where the application may load a malicious DLL or executable from an unexpected location. This could allow a low-privileged attacker to achieve arbitrary...

CVE-2026-51254

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

The vulnerability of the Microsoft Windows operating system’s message queue dispatcher allows a hacker to execute arbitrary code.

The vulnerability of the message queue dispatcher in Microsoft Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ALSA-2026:47083 Important: pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 For more details about the security issues, including the impact, a CVSS score,...

CVE-2026-64765

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or...

CVE-2026-64763

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app...

CVE-2026-64747

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2026-28981

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2026-56748

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

CVE-2026-64766

According to connected advisories, CVE-2026-64766 involves an integer overflow in Apple device software that is mitigated by input validation fixes. The issue affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.x, and related iOS/iPadOS/watchOS/tvOS/visionOS versions, with the impac...

EUVD-2026-49563

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or...

CVE-2026-43750

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

EUVD-2026-49547

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

CVE-2026-43750

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...