PT-2026-125215

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination...

RHEL 9 : compat-openssl11 (RHSA-2026:89737)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89737 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...

Oracle Linux 9 : xz (ELSA-2026-89749)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-89749 advisory. 5.2.5-8.1 - Fix: a buffer overflow in lzmaindexappend - Add test for the issue above needs a special build config to actually fail - does not fail in our...

RHEL 9 : libxml2 (RHSA-2026:90309)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90309 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2:...

RHEL 9 : compat-openssl11 (RHSA-2026:89738)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89738 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...

CVE-2026-104591

libosmocore through 1.14.1 contains a buffer overflow in osmoiuupcomputepayloadcrc in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service...

Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the IPMI specification. Security Fixes: FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI:...

Moderate: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm LZMA, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fixes: xz: XZ Utils:...

CVE-2026-104591

libosmocore through 1.14.1 contains a buffer overflow in osmoiuupcomputepayloadcrc in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service...

CVE-2026-104593

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decodemmename in src/libmsc/sgsiface.c. This allows a remote attacker to cause a denial of service...

CVE-2026-104591

libosmocore through 1.14.1 contains a buffer overflow in osmoiuupcomputepayloadcrc in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service...

EUVD-2026-110101

libosmocore through 1.14.1 contains a buffer overflow in osmoiuupcomputepayloadcrc in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service...

PT-2026-125168

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination...

UBUNTU-CVE-2026-116149

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption...

UBUNTU-CVE-2026-116153

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

Apple Security Advisory 10-26-2026-2

Apple Security Advisory 10-26-2026-2 - iOS 26.7.2 and iPadOS 26.7.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, and information disclosure vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-99098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each...

Oracle Linux 10 : freeipmi (ELSA-2026-89905)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89905 advisory. 1.6.20-1 - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. 1.6.19-1 - Update to 1.6.19,...

RHEL 10 : freeipmi (RHSA-2026:89905)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89905 advisory. The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the...

Red Hat: CVE-2026-116124: libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function oleinforeadmetabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The...