The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer boundaries in memory, allowing attackers to trigger a service failure.

The vulnerability in the Firefox web browser and Thunderbird email client is related to the issue of operations going beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2026-69396

Name of the Vulnerable Software and Affected Versions libril sem.so versions prior to SMR Aug-2026 Release 1 Description A stack-based buffer overflow exists in the libril sem.so library. This flaw allows privileged local attackers to execute arbitrary code. A stack-based buffer overflow occurs...

PT-2026-69982

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A type mismatch exists in the vhost inflight migration VMState handling. The destination buffer size is stored as a uint64 t but is read by the VMS VBUFFER load path as a signed int32 t. On...

PT-2026-69489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the USB gadget RNDIS function where the rndis query response function fails to perform adequate length checks on the BufLength and BufOffset variables. This lack of...

Alibaba Cloud Linux 3 : 0241: coreutils (ALINUX3-SA-2026:0241)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0241 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-56392: GNU coreutils unexpand is vulnerabl...

Linux Distros Unpatched Vulnerability : CVE-2026-71392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an...

Linux Distros Unpatched Vulnerability : CVE-2026-68199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: fix OOB access from firmware ADDBA window size aggrrecvaddbareqevt logs a debug message when the firmware-supplied winsz is outside AGGRWINSZMIN,...

Linux Distros Unpatched Vulnerability : CVE-2026-68097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size...

Photon OS 5.0: Libx11 PHSA-2023-5.0-90-0112

An update of the libX11 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-90-0112. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-68124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader ca...

CentOS 9 : kernel-5.14.0-734.el9

"The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-734.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in...

Photon OS 5.0: Binutils PHSA-2023-5.0-92-0087

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-92-0087. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 8 : ruby:3.3 (AXSA:2026-1503:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1503:01 advisory. zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF...

Alibaba Cloud Linux 3 : 0247: php:7.4 (ALINUX3-SA-2026:0247)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0247 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-14355: In PHP versions 8.2. before 8.2.32,...

Linux Distros Unpatched Vulnerability : CVE-2026-68365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: ioedgeport: cap received transmit credits The interrupt-status packet reports transmit credits returned by the device. edgeinterruptcallback adds t...

Linux Distros Unpatched Vulnerability : CVE-2026-68320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix authchunklist capacity check in sctpauthepaddchunkid sctpauthepaddchunkid uses SCTPNUMCHUNKTYPES 20 as the capacity limit for ep-authchunklist, allowi...

Linux Distros Unpatched Vulnerability : CVE-2026-68340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array...

The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer in memory, allowing an attacker to access confidential data.

The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability in the Firefox web browser, related to writing beyond the buffer limit, allows a hacker to trigger a service failure.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer boundaries in memory, allowing attackers to trigger a service failure.

The vulnerability in the Firefox web browser and Thunderbird email client is related to the issue of operations going beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...