PT-2026-106832

Name of the Vulnerable Software and Affected Versions ImageSharp versions 2.1.0 through 4.1.1 Description The TIFF CCITT Group 4 encoder in this 2D graphics library allocates memory based on Width times rowsPerStrip bytes. However, the T6BitCompressor.CompressStrip function can produce encoded ro...

EUVD-2026-93418

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

PT-2026-107106

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An out-of-bounds write exists in the wacom hid set device mode function within wacom sys.c due to a missing bounds check. This flaw allows for physical escalation of privilege without...

PT-2026-107073

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An out-of-bounds write issue exists in the Media component. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a...

PT-2026-106839

Name of the Vulnerable Software and Affected Versions ImageSharp versions 3.0.0 through 4.1.0 Description In the tiled TIFF decoding process, a destination buffer is allocated using TileWidth, but the TiffDecompressorsFactory.Create function constructs T4, T6, and Modified Huffman decompressors...

Linux Distros Unpatched Vulnerability : CVE-2026-98232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: Validate MODE SENSE lengths in scsicdlenable scsicdlenable uses length fields returned by MODE SENSE to locate the ATA feature mode page in a 64-byt...

macOS 27.x < 27.0 Multiple Vulnerabilities (149035)

The remote host is running a version of macOS / Mac OS X that is 27.x prior to the full release of 27.0. It is, therefore, affected by multiple vulnerabilities: - A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process...

AlmaLinux 8 : libpcap (ALSA-2026:76045)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:76045 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-98222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KEYS: encrypted: fix integer overflow of databloblen encryptedkeyalloc stores databloblen in a u16. It is computed from multiple string and payload lengths. If...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_21557)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202621557 advisory. kernel: can: j1939: j1939sessionnew: fix skb reference counting CVE-2024-56645 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA...

Linux Distros Unpatched Vulnerability : CVE-2026-98181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously...

CentOS 9 : pcre2-10.40-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the pcre2-10.40-7.el9 build changelog. - In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can...

Linux Distros Unpatched Vulnerability : CVE-2026-104036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but...

CVE-2026-77178

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

PT-2026-106510

In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gud plane atomic check The plane property loop uses req-propertiesnum properties + i as write index while simultaneously incrementing num properties inside the loop. At iteration i, num...

PT-2026-106288

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

CVE-2026-77178

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

Rocky Linux 10.1 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_1690)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261690 advisory. kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability CVE-2025-37819 kernel: RDMA/core: Fix KASAN: slab-use-after-free Read in...

PT-2026-106641

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix OOB write from device-reported iso length usb6fire pcm in urb handler sizes each outgoing isochronous packet as actual length - 4 / in n analog buffer, a 4832-byte object from kcallocPCM MAX PACKET SIZE, PCM N...

CVE-2026-106115: Out-of-bounds Write

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode...