PT-2026-56497

Name of the Vulnerable Software and Affected Versions protobufjs versions prior to 7.6.5 protobufjs versions prior to 8.6.6 Description protobufjs compiles protobuf definitions into JavaScript functions. The software parses option names by advancing through schema tokens until an = token is reach...

RHEL 9 : xorg-x11-server-Xwayland (RHSA-2026:36633)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:36633 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server:...

The vulnerability of the HeifPixelImage::overlay() function in the libheif library allows a hacker to induce a service failure.

The vulnerability of the HeifPixelImage::overlay function in the libheif library is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PYSEC-2026-899 protobuf-cpp and protobuf-python have potential Denial of Service issue

Summary A message parsing and memory management vulnerability in ProtocolBuffer’s C++ and Python implementations can trigger an out of memory OOM failure when processing a specially crafted message, which could lead to a denial of service DoS on services using the libraries. Reporter: ClusterFuzz...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for...

The vulnerability of the `tracing_buffers_mmap_close()` function in the kernel/trace/trace.c module, which supports Linux operating system’s kernel tracing functionality, allows a hacker to cause a service failure.

The vulnerability of the tracingbuffersmmapclose function in the kernel/trace/trace.c module, which supports Linux operating system’s kernel tracing mechanism, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can...

CVE-2025-59615

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization...

EUVD-2025-210436

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization...

CVE-2025-59615

Technical details are not publicly available in the provided documents. Monitor for updates.

OESA-2026-2798 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion ...

net: guard timestamp cmsgs to real error queue skbs

...

The vulnerability of the ALZ-file processing mechanism in the ClamAV antivirus program allows a hacker to induce a service failure.

The vulnerability of the ALZ-file processing mechanism in the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failure by sending a specially crafted fi...

kernel: ipv4: account for fraggap on the paged allocation path

A flaw was found in the Linux kernel's handling of IPv4 network packets. An error in how the kernel accounts for fragmented data during memory allocation can lead to an undersized memory buffer. This memory handling issue could potentially be exploited by a remote attacker to cause a system crash...

CVE-2026-57278

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

CVE-2026-57277

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

The vulnerability of the decoder in the UTF-8 library for working with the Protocol Buffers protocol (Protobuf) protobufjs allows attackers to bypass existing security mechanisms.

The vulnerability of the UTF-8 decoder in the Protocol Buffers Protobuf protobufjs library is related to incorrect handling of Unicode characters. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the library for working with the Protocol Buffers protocol protobufjs, related to uncontrolled changes to object prototype attributes, allows a hacker to trigger a service failure.

The vulnerability of the library for working with the Protocol Buffers protocol Protobuf protobufjs is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

TencentOS Server 3: openssl (TSSA-2026:0576)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0576 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

The vulnerability of the toObject() function in the Protocol Buffers library allows a attacker to execute arbitrary code.

The vulnerability of the toObject function in the Protocol Buffers library, which is used for working with Protocol Buffers, is related to incorrect code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...