PT-2026-58364

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description A buffer over-read in Windows Print Spooler components allows an authorized attacker to disclose information locally. A buffer over-read occurs when a program reads more data fr...

PT-2026-58534

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Excel, which could allow an unauthorized attacker to execute arbitrary code locally. A heap-based buffer overflow occurs...

PT-2026-58354

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A buffer over-read in Windows Redirected Drive Buffering enables an authorized attacker to elevate privileges locally, potentially allowing a low-privileged local account to obtain...

PT-2026-57981

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A buffer leak occurs during the processing of requests that contain a body when the system reads 0 bytes. This issue is especially prevalent with 100-Continue...

libsolv security update

0.7.24-6 - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178982...

PT-2026-58036

On Xtensa SoCs built with CONFIG XTENSA MPU and CONFIG USERSPACE, arch buffer validate in arch/xtensa/core/mpu.c — the architecture hook that verifies a user-mode-supplied buffer is accessible to the calling user thread with the requested permission — defaulted its return value to 0 access...

openSUSE 16 Security Update : tiff (openSUSE-SU-2026:21289-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21289-1 advisory. This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF...

openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21291-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21291-1 advisory. This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read...

PT-2026-58583

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-58572

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office, which allows an unauthorized attacker to execute code locally. This can occur through the processing of malicious files and...

PT-2026-58414

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description A buffer over-read in the Windows Overlay Filter allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the...

PT-2026-58318

Name of the Vulnerable Software and Affected Versions Windows Media affected versions not specified Description A heap-based buffer overflow exists in Windows Media, which could allow an authorized attacker with local access to execute arbitrary code locally. A heap-based buffer overflow occurs...

CVE-2026-51808

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2kdecoderimpl::invoke, invokelinebased, invokelinebasedstream, and invokelinebasedpredecoded function in source/core/interface/decoder.cpp...

CVE-2026-51807

Heap-based out-of-bounds write in j2kprecinctsubband::parsepacketheader in OpenHTJ2K versions 0.18.3 and earlier fixed in v0.18.4 caused by missing bounds validation before coding-pass lengths are written to j2kcodeblock::passlength128. A crafted JPEG 2000 codestream containing malformed PPM pack...

AlmaLinux 9 : perl-DBI (ALSA-2026:38512)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:38512 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...

PT-2026-58459

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A buffer over-read in Windows Hyper-V allows an authorized attacker to cause a denial of service over an adjacent network, potentially leading to a system crash. Recommendations At th...

PT-2026-58423

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description A buffer over-read in Windows RDP allows an unauthorized attacker to disclose sensitive information over a network and affect the system. A buffer over-read occurs when a program reads mo...

PT-2026-58560

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

AlmaLinux 9 : gimp (ALSA-2026:38496)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38496 advisory. gimp: gimp: Heap buffer overflow in readchanneldata CVE-2026-58379 Tenable has extracted the preceding description block directly from the AlmaLinux security...

Updated gzip package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Predictable Temporary File in GNU gzip. CVE-2026-41991 Global Buffer Overflow in GNU gzip. CVE-2026-41992...