CVE-2026-106061

A flaw in GIMP 's X cursor (XMC) thumbnail loader allows for a heap buffer over-read . The issue occurs because the software uses 32-bit signed arithmetic to calculate the pixel buffer size (width * height) for thumbnails. An integer overflow (CWE-190) in this calculation can result in an undersi...

Important: Red Hat Security Advisory: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

EUVD-2026-94103

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-106550

A flaw was found in convict. An attacker capable of submitting untrusted configuration keys can bypass property filters within the config.set function to modify base JavaScript objects. This prototype pollution allows the attacker to alter fundamental language methods, causing persistent...

CVE-2026-106235

Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 all...

CVE-2026-106300

Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39...

PT-2026-107585

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by...

PT-2026-107495

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service DoS for the affected application...

PT-2026-107653

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service...

PT-2026-107661

Name of the Vulnerable Software and Affected Versions Excelize versions 2.7.0 through 2.11.0 Description An issue exists when extracting conditional formats from a crafted worksheet. The GetConditionalFormats function fails to properly validate the structure of certain rules, specifically cellIs,...

PT-2026-107670

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service...

PT-2026-107615

Name of the Vulnerable Software and Affected Versions Cisco Nexus 3000 Series Switches affected versions not specified Cisco Nexus 9000 Series Switches affected versions not specified Description An issue exists in the VXLAN Operation, Administration, and Maintenance OAM feature of Cisco NX-OS...

PT-2026-107535

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-88252

A flaw was found in sssd. A local user can cause a Denial of Service...

UBUNTU-CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, s...

PT-2026-107550

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 ImageMagick versions prior to 6.9.13-57 Description A crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds. This error leads to an infinite loop, resulting in a...

PT-2026-107557

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 Description A client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, resulting in a server crash. A...

PT-2026-107555

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions prior to 6.9.13-55 Description A missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. Recommendations...

PT-2026-107551

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 ImageMagick versions prior to 6.9.13-57 Description A crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, which prevents the image processing from completing...

PT-2026-107547

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 ImageMagick versions prior to 6.9.13-57 Description A missing end-of-file check occurs when reading bzip2-compressed image data, which can lead to an infinite loop and the exhaustion of processing...