CVE-2026-91716

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

Security update for perl-Net-DNS (moderate)

openSUSE security update: security update for perl-net-dns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21859-1 Rating: moderate References: bsc1272212 bsc1272214 bsc1278084 Cross-References: CVE-2026-64193 CVE-2026-64194 CVE-2026-81928 CVSS...

Linux Distros Unpatched Vulnerability : CVE-2026-91100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potential...

RockyLinux 10 : libevent (RLSA-2026:67909)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67909 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...

Google Chrome < 153.0.8010.52 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 153.0.8010.52. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0194356994 advisory. - Use after free in PDFium in Google Chrome prior to 153.0.8010.52...

EulerOS 2.0 SP15 : sqlite (EulerOS-SA-2026-3798)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

UBUNTU-CVE-2026-91839

credential newline injection permits local root code execution...

EulerOS 2.0 SP15 : vim (EulerOS-SA-2026-3824)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in...

EulerOS 2.0 SP15 : vim (EulerOS-SA-2026-3799)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in...

UBUNTU-CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

CVE-2026-91839

credential newline injection permits local root code execution...

AlmaLinux 9 : postgresql:18 (ALSA-2026:67848)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67848 advisory. postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary...

AlmaLinux 8 : libevent (ALSA-2026:67908)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67908 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...

The vulnerability of the VideoLAN VLC media player software, related to integer overflow, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the VideoLAN VLC media player lies in a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the VMXNET3 network adapter allows attackers to escalate their privileges and execute arbitrary code on VMware Workstation and VMware Fusion hypervisors.

The vulnerability of the VMXNET3 network adapter in VMware Workstation and VMware Fusion relates to a potential overflow condition. Exploiting this vulnerability can allow an attacker to gain elevated privileges and execute arbitrary code...

Google Chrome < 153.0.8010.52 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 153.0.8010.52. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0194356994 advisory. - Use after free in PDFium in Google Chrome prior to 153.0.8010.52...

AlmaLinux 9 : libevent (ALSA-2026:67910)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67910 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...

EulerOS 2.0 SP15 : sqlite (EulerOS-SA-2026-3823)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

RockyLinux 9 : libevent (RLSA-2026:67910)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67910 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...