PT-2026-71658

Name of the Vulnerable Software and Affected Versions rsync versions 3.0.0 through 3.4.x Description An out-of-bounds write occurs when triggering HLINK BUMP processing on file entries that have the FLAG HLINKED flag set while the hard-link preservation option is inactive. This happens because th...

PT-2026-71656

Name of the Vulnerable Software and Affected Versions rsync versions 3.0.1 through 3.4.x Description An out-of-bounds write exists in the read args function. A malicious sender can corrupt adjacent heap memory by providing a crafted argument list. This occurs when the argument count fills the arg...

PT-2026-71818

IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

SUSE SLES15: himmelblau / himmelblau-sshd-config / himmelblau-sso / etc (SUSE-SU-2026:3576-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3576-1 advisory. Security fixes: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1...

Linux Distros Unpatched Vulnerability : CVE-2026-14677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-boun...

Vulnerability in core server (CVE-2026-14662)

PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may...

PT-2026-71759

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description The native inference process used to evaluate uploaded machine learning models fails to validate that a memory address offset supplied within the model remains within the bounds of the...

FFmpeg 4.4 < 9.0 Out-of-Bounds Heap Write (CVE-2026-70632)

The version of FFmpeg installed on the remote host is 4.4 or later but prior to 9.0. It is, therefore, affected by an out-of-bounds heap write vulnerability: - An out-of-bounds heap write vulnerability in the native GoPro CineForm HD CFHD decoder allows remote attackers to corrupt heap memory by...

Autodesk Revit 2026 < 2026.5 / 2027 < 2027.2 Multiple Vulnerabilities (adsk-sa-2026-0011)

The version of Autodesk Revit installed on the remote host is 2026 prior to 2026.5 or 2027 prior to 2027.2. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can...

PT-2026-71462

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description An integer wraparound issue exists in functions handling...

CVE-2026-68206 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68206 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63796 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-63796 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68151 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68151 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68187 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68187 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64535 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64535 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64428 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64428 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64405 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64405 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-19002

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...

CVE-2026-18725

AIONLYREPORT package: iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10 ------ Summary: Out-of-Bounds Write and Information Disclosure via Unvalidated IPv6 Payload Length: crafted ICMPv6 Echo Requests can cause iscsiuio to trust an inflated ipv6plen larger than the actual received payload, leading...

CVE-2026-19003 MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...