Security Vulnerabilities fixed in Thunderbird 158 — Mozilla

Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU Core Utilities vulnerabilities (USN-8697-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8697-1 advisory. It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield function. A local attacker could...

KB5126646: Windows Server 2025 Security Update (October 2026)

The remote Windows host is missing security update 5126646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2026:4632-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4632-1 advisory. This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000...

SUSE SLES15 Security Update : libsoup (SUSE-SU-2026:4616-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4616-1 advisory. - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. -...

CVE-2026-83867: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : PostgreSQL vulnerabilities (USN-8653-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8653-1 advisory. It was discovered that PostgreSQL incorrectly handled COPY FROM STDIN when an early failure occurred. An authenticated user could...

CVE-2026-95115

A buffer overflow vulnerability exists in the libwebsockets library (main 106d542c) within the LEJP JSON parser . This flaw allows a remote attacker to trigger a denial of service (DoS) condition. While the vulnerability is confirmed to be exploitable via a proof-of-concept, specific exploit link...

ROS-20261013-73-0419

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-112817

Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description A heap-based buffer overflow occurs in Windows Internet Connection Sharing ICS, which allows an authorized attacker to execute arbitrary code over an adjacent...

kernel security update

5.14.0-687.57.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

CentOS Linux 8.4 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.4:CLSA-2026:1791918528)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791918528 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

CVE-2026-95115

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser...

Stable Channel Update for Desktop

The Stable channel has been updated to 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

ROS-20261013-73-0253

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-83836: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally...

SUSE SLES15 Security Update : unbound (SUSE-SU-2026:4624-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4624-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass...

Windows-CVE-2024-38063

Windows CVE-2024-38063 CVE ID: CVE-2024-38063 CVSS 3.1 Score: 9.8 Critical EPSS Score: Low - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impact: Remote Code Execution Affected Components: Windows TCP/IP stack Attack Vector: Network Remote Vulnerability Details...

EUVD-2026-98095

The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chansend in subsys/bluetooth/host/att.c documents and every other error exit implements the contract that on failure the caller retains ownership of the netbuf; the BTATTOPSIGNEDWRITECMD branch instead...

CVE-2026-19938 Use-after-free of an ATT PDU buffer when signing an outgoing Bluetooth ATT Signed Write Command fails

The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chansend in subsys/bluetooth/host/att.c documents and every other error exit implements the contract that on failure the caller retains ownership of the netbuf; the BTATTOPSIGNEDWRITECMD branch instead...