Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt5-qtbase (UTSA-2023-001575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001575 advisory. Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x...

Moderate: Red Hat Security Advisory: libxml2 security, bug fix, and enhancement update

An update for libxml2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the xmlParseInternalSubset function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service DoS, making the affected system or application...

CVE-2026-88404

A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...

CVE-2026-88405

A remote code execution RCE vulnerability in the RemoteRegisterFunctionService function /remote/remote-register-function.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...

CVE-2026-39919

A flaw was found in Ghostscript. This heap-based buffer overflow vulnerability in the JPEG 2000 output adapter allows an attacker to cause memory corruption by supplying a specially crafted PDF file. The crafted PDF contains a JPEG 2000 image with mismatched component subsampling factors...

chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

SUSE SLES12 Security Update : openexr (SUSE-SU-2026:4005-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4005-1 advisory. - CVE-2026-59186: On ILP32, the Array2D tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, an...

CVE-2026-88404

The Univer v1.0.0-alpha.2 software contains a remote code execution (RCE) vulnerability within the UniscriptExecutionService.execute() function located in /services/script-execution.service.ts. This flaw allows an attacker to execute arbitrary code by sending a crafted payload . While the SSSV me...

CVE-2026-88405

A remote code execution RCE vulnerability in the RemoteRegisterFunctionService function /remote/remote-register-function.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...

CVE-2026-88405: Improper Control of Generation of Code

A remote code execution RCE vulnerability in the RemoteRegisterFunctionService function /remote/remote-register-function.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...

CVE-2026-88405

A remote code execution RCE vulnerability in the RemoteRegisterFunctionService function /remote/remote-register-function.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...

CVE-2026-88404

A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...

EUVD-2026-84201

A remote code execution RCE vulnerability in the RemoteRegisterFunctionService function /remote/remote-register-function.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...

EUVD-2026-84195

A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...

ALSA-2026:69609 Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

PT-2026-96289

Name of the Vulnerable Software and Affected Versions Univer version 1.0.0-alpha.2 Description A remote code execution issue exists in the UniscriptExecutionService.execute function located in /services/script-execution.service.ts. This allows attackers to execute arbitrary code by sending a...

CVE-2026-88404: Improper Control of Generation of Code

A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...

EUVD-2026-84189

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the DecodeGrBMatrix function /v19/decodematrix.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88404

A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...