CVE-2026-116326

Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmpbuf, via a tied Perl object, or a Perl object whose overloaded conversion throws while plperl is handling another error. We have not ruled out arbitrary code execution on some platform. Versions before...

postgresql: postgresql: Arbitrary code execution via uncaught exceptions in PL/Perl

A flaw was found in PostgreSQL. An authenticated user with permissions to create database objects can exploit uncaught exceptions within the PL/Perl language extension by supplying a crafted Perl object while an existing error is being handled. This issue leads to the reuse of stale memory buffer...

DEBIAN-CVE-2026-116326

Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmpbuf, via a tied Perl object, or a Perl object whose overloaded conversion throws while plperl is handling another error. We have not ruled out arbitrary code execution on some platform. Versions before...

PT-2026-145816

Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmp buf, via a tied Perl object, or a Perl object whose overloaded conversion throws while plperl is handling another error. We have not ruled out arbitrary code execution on some platform. Versions before...

Lucas Rodés-Guirao whatstk resource management error vulnerability

In versions 0.2.0 through 0.9.0 of Lucas Rodés-Guirao’s whatstk, there is a resource management error vulnerability. This vulnerability stems from the generateregex function in the whatstk/whatsapp/parser.py file; it fails to escape characters within the header format when constructing the regula...

CVE-2026-119279

A flaw was found in MariaDB Connector/J. A malicious or compromised database server, or an attacker intercepting network traffic, can cause a Denial of Service DoS by sending crafted responses containing excessively large length values. Because the connector converts these protocol values into...

CVE-2026-99077

In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation Needed and Redirect Message packets are locally delivered and quote a UDP packet, a FIB nexthop exception FNHE is only created if the kernel c...

CVE-2026-99076

In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching Currently, when ICMPv6 Packet Too Big and Redirect Message packets are locally delivered and quote a UDP packet, an exception is only created in the IPv6 exception cache if the...

CVE-2026-115383

A flaw was found in Wasmtime. This vulnerability allows an untrusted guest module to cause a Denial of Service DoS by triggering a host application crash. When the WebAssembly exceptions feature is enabled, Wasmtime improperly validates imported tags that use subtypes of expected types. A malicio...

CVE-2026-115383 Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing...

CVE-2026-115383

The Wasmtime runtime versions 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 are vulnerable to an improper validation flaw. The issue arises when core modules import WebAssembly tags with a subtype of the original type. This allows malicious guests to mis-type exception object payloads , leading t...

CVE-2026-115383 Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing...

PT-2026-135073

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing...

CVE-2026-76493

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76493 Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76493 Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

EUVD-2026-107354

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76493

The Cisco Expressway Series software is affected by multiple uncaught exception vulnerabilities (categorized as CWE-248 ) identified during an internal security review. These issues can lead to a high availability impact , as indicated by a CVSS 3.1 base score of 7.5. Remediation is addressed in ...

PT-2026-120706

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description An issue exists involving uncaught exceptions, which are errors that occur during program execution that the software fails to handle, leading to potential instability or...

Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76493: Cisco Expressway Series Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...