CVE-2026-17425

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a stack buffer overflow exploitable remotely with no authentication, causing denial of service (CVSS 7.5). IBM's support page (https://www.ibm.com/support/pages/node/7283858) should be checked for applicable fixes. Exploitation details are not provided.

CVE-2026-17141

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 suffer a CWE-787 out-of-bounds write in the bos.mp64 fileset, allowing unauthenticated remote attackers to execute arbitrary code (CVSS 9.8). IBM has issued APARs IJ59566, IJ59565, IJ59564, and IJ59563, available via Service Pack 13 (AIX 7.2 TL05), SP5 (7.3 TL...

CVE-2026-17122

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable remotely without authentication, rated CVSS 9.8 CRITICAL (C/I/A high). IBM has published advisory https://www.ibm.com/support/pages/node/7283858. No exploit code or active exploitation is reported in the provid...

CVE-2026-17040

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-16951

A heap-based buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local authenticated attacker to execute arbitrary code. CVSS 6.7 (MEDIUM) reflects the high privileges required. No exploit or patch details are provided in the documents. The IBM support page (linked in references) sho...

CVE-2026-16944

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable by a local attacker with high privileges to execute arbitrary code, yielding HIGH confidentiality, integrity, and availability impact (CVSS 6.7). No patch version or in-the-wild exploitation details are provide...

CVE-2026-16943

IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 are affected by a heap-based buffer overflow (CWE-787) exploitable by a local attacker with high privileges to execute arbitrary code (CVSS 8.2 HIGH, scope changed). Fixes are available via AIX SP13/TL-specific service packs and VIOS Fix Packs (4.1.0.50, 4.1....

CVE-2026-16936

A buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to execute arbitrary code (CVSS 8.8, scope changed). No patch version or exploit details are provided in the documents.

CVE-2026-16934

A local attacker with low privileges can exploit a heap-based buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 to gain elevated privileges, with high confidentiality, integrity, and availability impact. No specific exploit details or patch information are provided in the documents; monitor...

K000163013: LibTIFF vulnerabilities CVE-2018-17000, CVE-2018-19210, CVE-2019-7663, CVE-2020-19131, and CVE-2020-19144

Security Advisory Description CVE-2018-17000 A NULL pointer dereference in the function TIFFmemcmp at tifunix.c called from TIFFWriteDirectoryTagTransferfunction in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by th...

EUVD-2026-63664

Mailpit is an email testing tool and API for developers. From 1.30.0 until 1.30.5, Mailpit's internal/smtpd/smtpd.go readData function calls bufio.Reader.ReadBytes before applying the lendata+lenline size check to the completed SMTP DATA line against Server.MaxSize. An unauthenticated SMTP client...

CVE-2026-69242

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofuncs/image.c and cause an integer overflow in vipsimagesanity. The resulting buffer-region...

CVE-2026-61711 vulnerabilities

Vulnerabilities for packages: scorecard, podman...

EUVD-2026-63599

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

GHSA-9X89-V382-MJH7 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-77148

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub44B50C of the file /cgi-bin/mbox-config?method=SET&section=ptestchannel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit has...

CVE-2026-53586

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, the built-in HTTP transport in src/libgit2/transports/http.c follows an offsite initial redirect, an...

CVE-2026-53583

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

CVE-2026-53587

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...

CVE-2026-53584

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...