Linux Distros Unpatched Vulnerability : CVE-2026-75818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer...

PT-2026-106497

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifs query reparse point In cifs query reparse point, the start = end check before casting to struct reparse data buffer only ensures the start pointer is within the response. It fails to...

PT-2026-106683

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ib mad complete recv initializes mad recv wc-rmpp list and then runs ib mad enforce security before linking recv buf onto that list. On failure it calls ib free recv...

PT-2026-106722

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM Load in load dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause...

PT-2026-106625

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel pcie: validate TX skb length in send sync btintel pcie prepare tx copies skb-len bytes into a fixed BTINTEL PCIE BUFFER SIZE 4096 DMA slot via an unchecked memcpy. Oversized packets are currently rejected only ...

PT-2026-107124

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76746 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

CVE-2026-76746: Buffer Copy without Checking Size of Input

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device...

PT-2026-106838

Name of the Vulnerable Software and Affected Versions ImageSharp versions 3.0.0 through 4.1.0 Description Decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression allows the passing of attacker-expanded runs to BitWriterUtils.WriteBits without verifying the current row width...

PT-2026-106518

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilc wlan handle isr ext wilc wlan handle isr ext takes the RX transfer size from the device-reported interrupt status register a 15-bit field shifted left by 2, up to 131068 bytes and...

CVE-2026-106547: Heap-based Buffer Overflow

A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5Dfillinit fills the fill-value buffer from datatype and...

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the ipinfo_lookup() function in the MTR network diagnostic and monitoring utility allows a hacker to cause a service failure.

The vulnerability of the ipinfolookup function in the MTR network diagnostic and monitoring utility is related to the operation that exceeds the buffer boundaries in memory when processing DNS responses. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the unci decoder and file format encoder component of libheif allows a hacker to execute arbitrary code.

The vulnerability of the unci decoder and file format encoder component of libheif relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Windows Media Player media player on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media Player media player on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the USB Video Driver driver for Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the USB Video Driver driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Hyper-V component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Remote Desktop Services RDS for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows an attacker to increase their privileges remotely...

CVE-2026-19029: Out-of-bounds Read

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...