The vulnerability of the biometric service in Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the VNC server component XRDP allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the VNC server component XRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure remotely...

The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

RHEL 10 : libvirt (RHSA-2026:75583)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:75583 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating system...

MiracleLinux 8 : gvfs-1.36.2-22.el8_10 (AXSA:2026-1967:05)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1967:05 advisory. gvfs: SFTP: heap-based buffer overflow in readreply CVE-2026-84268 Tenable has extracted the preceding description block directly from the MiracleLinux...

RHEL 8 : librabbitmq (RHSA-2026:75582)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:75582 advisory. The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using...

PT-2026-106159

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow in the cfg2prop function within btif storage.cc can lead to an out-of-bounds write. This issue allows for remote code execution without requiring additional...

CVE-2026-20540: Buffer Over-read

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20539: Buffer Over-read

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20521: Stack-based Buffer Overflow

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571...

CVE-2026-58835: Heap-based Buffer Overflow

In cfg2prop of btifstorage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-105285: Stack-based Buffer Overflow

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

ROS-20261005-73-0008

The vulnerability in rsync is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sgpd_del_entry() function in the src/isomedia/box_code_base.c file of the MP4Box component of the GPAC multimedia platform allows a hacker to trigger a service failure.

The vulnerability of the sgpddelentry function in the src/isomedia/boxcodebase.c file of the MP4Box component of the GPAC multimedia platform is related to the occurrence of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20261005-73-0004

The vulnerability of the addimpliedinclude function in the rsync network daemon—a utility for transferring and synchronizing files—is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ROS-20261005-73-0007

The vulnerability of the HLINKBUMP module in the Rsync file transfer and synchronization utility is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the biometric service in Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

ALSA-2026:75570 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialize...

RHEL 10 : freerdp (RHSA-2026:75570)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:75570 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...