PT-2026-79159

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...

PT-2026-79228

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

PT-2026-79161

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...

PT-2026-79144

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unusual custom libvips sources and use them to process untrusted uncompressed PPM images can trigger a max/min error in vips source read to memory in libvips/iofuncs/source.c. The...

PT-2026-79229

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

PT-2026-79225

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-76918 Heap-based Buffer Overflow in Wireshark

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76918

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76917 Heap-based Buffer Overflow in Wireshark

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76917

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76879 Stack-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76879

Wireshark's C12.22 protocol dissector contains a stack-based buffer overflow in versions 4.6.0–4.6.7 and 4.4.0–4.4.18. The flaw allows a remote, unauthenticated attacker to send crafted C12.22 protocol traffic causing the dissector to crash, resulting in denial of service (CVSS 7.5 HIGH, availabi...

CVE-2026-76889 Heap-based Buffer Overflow in Wireshark

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76888 Heap-based Buffer Overflow in Wireshark

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76888

Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 have a flaw in the RDP protocol dissector that can be triggered by crafted RDP traffic, causing a crash and denial of service. CVSS 3.1 scores LOW (3.1). Exploitation details are not provided. Upgrade to a patched version per WNPASec-2026-67.

CVE-2026-76887 Heap-based Buffer Overflow in Wireshark

Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76886 Heap-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76886

Wireshark's C12.22 protocol dissector contains a heap-based buffer overflow affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18. Crafted C12.22 packets can trigger a crash, enabling denial of service with CVSS 8.1 HIGH (network-exploitable, no authentication). No in-the-wild exploitation is reported....

CVE-2026-76883 Heap-based Buffer Overflow in Wireshark

Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76883

The Catapult DCT2000 file parser in Wireshark 4.6.0–4.6.7 and 4.4.0–4.4.18 crashes on malformed input, causing denial of service. CVSS 4.7 (local, high complexity). No in-the-wild exploitation reported; upgrade to patched versions. See wireshark.org/security/wnpa-sec-2026-74.html and gitlab.com/w...