The vulnerability of the biometric service in Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the biometric service in Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-20521: Stack-based Buffer Overflow

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571...

PT-2026-106242

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

RHEL 9 : gimp (RHSA-2026:75575)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:75575 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

PT-2026-106159

In cfg2prop of btif storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58835: Heap-based Buffer Overflow

In cfg2prop of btifstorage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

RHEL 8 : gd (RHSA-2026:75680)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:75680 advisory. GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other...

The vulnerability of the biometric service in Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the VNC server component XRDP allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the VNC server component XRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure remotely...

The vulnerability of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) relates to the occurrence of operations outside the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could all...

The vulnerability of the XRDP server’s FIPS-protected RDP packets allows a attacker to trigger a service failure.

The vulnerability of the XRDP server’s FIPS-protected RDP packets relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the virtual port forwarding mechanism in the Server XRDP allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the XRDP server’s virtual port forwarding mechanism is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the sgpd_del_entry() function in the src/isomedia/box_code_base.c file of the MP4Box component of the GPAC multimedia platform allows a hacker to trigger a service failure.

The vulnerability of the sgpddelentry function in the src/isomedia/boxcodebase.c file of the MP4Box component of the GPAC multimedia platform is related to the occurrence of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the gdi_Bitmap_Decompress() function in the libfreerdp/gdi/graphics.c file of the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gdiBitmapDecompress function in the libfreerdp/gdi/graphics.c file of the RDP client FreeRDP is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

ROS-20261005-73-0008

The vulnerability in rsync is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

MiracleLinux 9 : gawk-5.1.0-6.el9_8.1 (AXSA:2026-1965:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1965:02 advisory. gawk: gawk: Memory corruption via integer overflow CVE-2026-40468 gawk: Gawk: Buffer overflow in ftype routine may lead to code execution or denial ...

Fedora 45 : nagios-plugins (2026-c213ad9471)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c213ad9471 advisory. Update to upstream bz2453492 checkicmp: host-count overflow leads to heap buffer overflow bz2513957 Update 0012-fix-perl-ntp-ipv6.patch to allow uppercase...

vim security update

8.2.2637-26.0.1.el98.23 - Remove upstream references Orabug: 31197557 2:8.2.2637-26.23 - RHEL-271037 vim: ex command injection via crafted filename in signjump 2:8.2.2637-26.22 - RHEL-257027 CVE-2026-73073 vim: arbitrary Ex command execution during C omni-completion via crafted typeref...

AlmaLinux 9 : libvirt (ALSA-2026:74424)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:74424 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer...