CVE-2026-53970: Download of Code Without Integrity Check

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

Alibaba Cloud Linux 3 : 0254: pipewire (ALINUX3-SA-2026:0254)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0254 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-5674: A flaw was found in PipeWire, a...

openSUSE 16 Security Update : kak-lsp (openSUSE-SU-2026:21560-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21560-1 advisory. Changes in kak-lsp: - Update to version 21.0.2: Fix a regression that broke compatibility with Kakoune versions older than 2026.05.21 Add a...

TencentOS Server 4: pipewire (TSSA-2026:0798)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0798 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-62696

Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

CVE-2026-62696

CVE-2026-62696 impacts the Windows Program Compatibility Assistant Service. The advisory describes an integer underflow (wrap/wraparound) that allows an authorized local attacker to elevate privileges. CVSS: 3.1, Base score 7.8 (HIGH), with Local attack vector, Low attack complexity, Privileges r...

EUVD-2026-56346

Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

PT-2026-70462

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to...

CVE-2026-62696: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68149

The CVE-2026-68149 entry pertains to a Linux kernel bug in ACL_DONT_CACHE handling within forget_cached_acl(). The issue arises when ACL_DONT_CACHE state is unintentionally invalidated, affecting inodes for filesystems opting out of POSIX ACL caching. Specifically, in fuse-related paths, forget_a...

EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2026-3164)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows ...

K000162842: wolfSSL vulnerability CVE-2026-55961

Security Advisory Description wolfSSLPKCS7verify returning success for a degenerate certs-only PKCS7 object that contains no signer. Such an object has empty signerInfos, so the underlying signed-data verification succeeds without authenticating any content. The compatibility-layer verify path no...

EulerOS 2.0 SP13 : xorg-x11-server (EulerOS-SA-2026-3006)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within...

EulerOS 2.0 SP15 : xorg-x11-server (EulerOS-SA-2026-2956)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map...

Malicious code in dolyame-boxy-desktop-bnpl-card-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b6f75040edc2a67f6c4912c7b8ff63ec6bd8dbd35c235bd3787ea24f52d4a2 On require/import, index.js loads./polyfill.js which selects a platform-specific endpoint, fetches bytes over HTTPS from one of several .workers.dev...

MAL-2026-12075 Malicious code in tinkoff-boxy-mobile-vivid-heading (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979353bc7d77343797621496972688b79dddd8688f1e1021b04a04c4d0572b31 On require of the package, runtime.js selects a platform-specific asset path and fetches an opaque binary over HTTPS from Cloudflare Workers hosts...

CVE-2026-58063

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...