BIT-POSTGRESQL-2026-14664 PostgreSQL regexp heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

CVE-2026-76036

A flaw was found in Dawn in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-58081

Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv3 to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer...

CVE-2026-58082

The ISO-2022 encoding module used a stack buffer sized to MBLENMAX 6 bytes for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, in which case conversions can trigger a stack buffer overflow of up to four bytes. An application that uses iconv3 to...

USN-8093-2 libssh vulnerability

USN-8093-1 fixed a vulnerability in libssh. This update provides the corresponsing fix for Ubuntu 26.04 LTS. Original advisory details: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a client application queried extension data out of bounds...

CVE-2026-58082 Stack based buffer overflow in iconv(3)

The ISO-2022 encoding module used a stack buffer sized to MBLENMAX 6 bytes for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, in which case conversions can trigger a stack buffer overflow of up to four bytes. An application that uses iconv3 to...

CVE-2026-58082

This stack buffer overflow in FreeBSD's iconv(3) ISO-2022 encoding module occurs because an intermediate buffer is sized to MB_LEN_MAX (6 bytes) , while some ISO-2022 variants require up to 10 bytes per character , allowing overflow of up to four bytes. Any application using iconv(3) to convert u...

CVE-2026-58081 Heap based buffer overflow in iconv(3)

Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv3 to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer...

CVE-2026-58081

CVE-2026-58081 is a buffer overflow in FreeBSD's iconv(3) library. The HZ, UTF-7, VIQR, and ZW encoding modules did not properly validate the caller-supplied output buffer size before writing converted characters, allowing an application converting untrusted input to overflow that buffer. Red Hat...

CVE-2026-49420

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traffic from inside a NAT gateway using libalias can overflow a...

EUVD-2026-62242

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traffic from inside a NAT gateway using libalias can overflow a...

CVE-2026-49420 Buffer overflow in libalias RTSP handler

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traffic from inside a NAT gateway using libalias can overflow a...

CVE-2026-49420 Buffer overflow in libalias RTSP handler

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traffic from inside a NAT gateway using libalias can overflow a...

CVE-2026-49420

The RTSP handler in FreeBSD's libalias library writes rewritten packets into a fixed-length stack buffer without bounds checks, enabling a stack buffer overflow triggered by crafted RTSP traffic on NAT ports 554/7070, leading to RCE in the kernel (ipfw(4) NAT) or root-owned natd(8) process. Worka...

CVE-2026-76043

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:45+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824...

CVE-2026-76037

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:24+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824 2026-08-24...

CVE-2026-74984

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:03+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74965

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:18+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 06:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtimzto5x324...

CVE-2026-74952

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:49+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtiopiigbj2h 2026-09-02 04:47:26+00:00| seen|...

CVE-2026-74950

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:44+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 10:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtiyrebqr723...