Apple Security Advisory 10-26-2026-2

Apple Security Advisory 10-26-2026-2 - iOS 26.7.2 and iPadOS 26.7.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, and information disclosure vulnerabilities...

Apple Security Advisory 10-26-2026-7

Apple Security Advisory 10-26-2026-7 - tvOS 27.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, buffer overflow, integer overflow, and information disclosure vulnerabilities...

PT-2026-125087

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode mme name in src/libmsc/sgs iface.c. This allows a remote attacker to cause a denial of service...

PT-2026-123209

SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious device can overflow memory buffers. The software checks the total size only once at the beginning, but doesn't track the cumulative size as multiple segments arrive. An attacker can declare a...

UBUNTU-CVE-2026-115484

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the...

UBUNTU-CVE-2026-115723

Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers connecting from the configured peer address can declare up to 65535 bytes and...

Moderate: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm LZMA, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fixes: xz: XZ Utils:...

Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the IPMI specification. Security Fixes: FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI:...

PT-2026-125215

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination...

Fuji Electric V-SFT buffer error vulnerability

Fuji Electric V-SFT versions 6.2.11.0 and earlier contain a buffer error vulnerability. This vulnerability arises from a stack buffer overflow when opening a specially crafted V7 file, potentially leading to information disclosure or arbitrary code execution. Fuji Electric...

CVE-2026-104591

libosmocore through 1.14.1 contains a buffer overflow in osmoiuupcomputepayloadcrc in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service...

RHEL 10 : freeipmi (RHSA-2026:89905)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89905 advisory. The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the...

RHEL 9 : compat-openssl11 (RHSA-2026:89738)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89738 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...

Oracle Linux 9 : xz (ELSA-2026-89749)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-89749 advisory. 5.2.5-8.1 - Fix: a buffer overflow in lzmaindexappend - Add test for the issue above needs a special build config to actually fail - does not fail in our...

FreeBSD : ImageMagick7 -- multiple vulnerabilities (fc4d0a5b-d0c6-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fc4d0a5b-d0c6-11f1-bae2-3497f65b111b advisory. The ImageMagick project published security advisories for issues fixed in releases 7.1.2-26...

RHEL 9 : libxml2 (RHSA-2026:90309)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90309 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2:...

Linux Distros Unpatched Vulnerability : CVE-2026-99098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each...

RHEL 9 : compat-openssl11 (RHSA-2026:89737)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89737 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...

Libimobiledevice buffer error vulnerability

Libimobiledevice versions 1.4.0 and earlier contain a buffer error vulnerability. This vulnerability stems from an unknown portion within the file src/afc.c in the AFC component, resulting in a heap buffer overflow that can be exploited remotely...

ALSA-2026:89747 Important: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling...