324412 matches found
PT-2026-65279
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versio...
EUVD-2026-49396
LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch function src/librawcxx.cpp and fujirotate function src/decoders/fuji.cpp...
RockyLinux 9 : libpq (RLSA-2026:44308)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:44308 advisory. postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 Tenable has extracted the preceding...
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-39782)
In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2logdocheckpoint Both jbd2logdocheckpoint and jbd2journalshrinkcheckpointlist periodically release jlistlock after processing a batch of buffers to avoid long hold times on the jlistlock. However,...
Siemens SIMATIC S7-1500 CPU 1518 MFP Use After Free (CVE-2025-39691)
"In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bhread helper There's issue as follows: BUG: KASAN: stack-out-of-bounds in endbufferreadsync+0xe3/0x110 Read of size 8 at addr ffffc9000168f7f8 by task swapper/3/0 CPU: 3 UID: 0 PID: 0 Com...
PT-2026-64886
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Buffer Over-read issue in Apache Thrift C++ bindings. The flaw occurs during a heap out-of-bounds read within the readHeaderFormat function of the THeaderTransport class. Recommendations Upgra...
PT-2026-64887
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description A heap-based buffer overflow exists in the Apache Thrift C++ bindings. The issue occurs during a write operation within the THeaderTransport::untransform function when handling ZLIB compressio...
MiracleLinux 9 : postgresql:16 (AXSA:2026-1358:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1358:01 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...
CVE-2026-51235
LibRaw 0.21 contains a buffer overflow in the stretch() and fuji_rotate() functions. Red Hat’s advisory states the issue is a vulnerability in the LibRaw library that could allow memory overwrite, potentially leading to denial of service or unauthorized code execution. Mitigation: avoid processin...
About the security content of macOS Sonoma 14.8.8
About the security content of macOS Sonoma 14.8.8 This document describes the security content of macOS Sonoma 14.8.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
UBUNTU-CVE-2026-64517
In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in xegscinitposthwconfig explicitly frees a BO allocated with xemanagedbocreatepinmap via xebounpinmapnovm. Since the managed BO already has a devm cleanup...
CVE-2026-64219
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...
Siemens SIMATIC S7-1500 CPU 1518 MFP Classic Buffer Overflow (CVE-2026-23378)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505761; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
Siemens SIMATIC S7-1500 CPU 1518 MFP Buffer Access with Incorrect Length Value (CVE-2026-31752)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505771; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
EUVD-2026-49420
schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in UnpackFrameHeader. Multiple attacker-controlled index parameters are used to access static and heap table arrays without range limitation. Invalid index values lead to out-of-bounds memory writing and heap buffer overflow...
PT-2026-65227
In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive big receive big bounds the device-announced length by big packets num skbfrags + 1 PAGE SIZE. That is still too loose: add recvbuf big sets sg1 to start at offset sizeofstruct padded vnet hdr...
PT-2026-65158
Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A buffer overflow occurs due to insufficient bounds checking. This flaw allows an application to execute arbitrary code...
PT-2026-65255
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 Description A buffer overflow occurs during the processing of a 3D model, which may lead to the disclosure of...