PT-2026-81398

Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.2.11 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description A crafted EXR file with a nonzero dataWindow.min can cause the TypedFlatImageChannel::row function to return an invalid he...

EulerOS Virtualization 2.13.0 : httpd (EulerOS-SA-2026-3215)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...

Linux Distros Unpatched Vulnerability : CVE-2026-78161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function reportrawcbor of the file lib/misc/lecp.c of the component LECP CBOR Recordin...

CVE-2026-55059

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

The vulnerability of the rxgk_verify_authenticator() function in the net/rxrpc/rxgk.c module allows attackers to access protected information or cause service failures under Linux operating system kernels.

The vulnerability of the rxgkverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow a remote attacker to gain access to protected...

The vulnerability of the decode_int() function in the net/netfilter/nf_conntrack_h323_asn1.c module of the netfilter component in the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the decodeint function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter component in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

The vulnerability of the u32_classify() function in the net/sched/cls_u32.c module of the network scheduling subsystem of the Linux operating system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the u32classify function in the net/sched/clsu32.c module of the network scheduling subsystem of the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability may allow an attacker to...

The vulnerability of the netfs_read_unlock_folios() function in the fs/netfs/read_collect.c module, which is part of the Linux kernel’s network file system support, allows a attacker to gain access to protected information or cause service interruptions.

The vulnerability of the netfsreadunlockfolios function in the fs/netfs/readcollect.c module, which is part of the Linux kernel’s network file system support, relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access...

The vulnerability of the ice_vsi_cfg_rxq() function in the drivers/net/ethernet/intel/ice/ice_base.c file of the Ethernet network adapter driver for the Intel kernel in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icevsicfgrxq function in the drivers/net/ethernet/intel/ice/icebase.c file of the Ethernet network adapter driver for Intel’s Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an...

The vulnerability of the l2cap_ecred_conn_req() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to access protected information or cause service failures.

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

The vulnerability of the simplify_symbols() function in the kernel/module/main.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the simplifysymbols function in the kernel/module/main.c module of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-63072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can wri...

Wazuh Server 1.0.0 < 4.14.6 Out-of-Bounds Write (CVE-2026-44254)

The version of Wazuh Server on the remote host is at least 1.0.0 and prior to 4.14.6. It is, therefore, affected by an out-of-bounds write vulnerability: - HandleSecureMessage passes a pointer inside its stack buffer to ReadSecMSG, which decompresses up to OSMAXSTR bytes at that offset. An...

PT-2026-81303

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 3.0.22 OpenSSL versions prior to 3.4.7 OpenSSL versions prior to 3.5.8 OpenSSL versions prior to 3.6.4 OpenSSL versions prior to 4.0.2 OpenSSL version 1.1.1 Description An 8-byte out-of-bounds heap write occurs during...

Adobe Illustrator < 29.8.10 / 30.0 < 30.7 Memory exposure (APSB26-124)

The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.10, 30.7. It is, therefore, affected by a vulnerability as referenced in the APSB26-124 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory exposure CVE-2026-71441 Note that Nessus has not test...

EulerOS Virtualization 2.13.1 : httpd (EulerOS-SA-2026-3175)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...

PT-2026-81800

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds write occurs in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker to potentially execute...

PT-2026-81594

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows. This issue allows a remote attacker to...

PT-2026-81585

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES to run on Windows, could allow a remote attacker to potentially execute...

PT-2026-81695

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in Skia, a graphics library. A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to read memory...