Security Bulletin: IBM MQ is affected by an arbitrary code execution vulnerability (CVE-2026-12665)

Summary IBM MQ has addressed an arbitrary code execution vulnerability due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment Vulnerability Details CVEID:CVE-2026-12665 DESCRIPTION: IBM MQ could allow a remote...

CVE-2022-21974

CVE-2022-21974: Unitialized pointer free in RMSRoamingSecurity Remote Code Execution Root-cause The RMSRoamingSecurity!ATL::CComCreator ::CreateInstance constructor allocates and initializes a CRmsRoamingSecurity object 0x3470 bytes but it fails to initialize completely its state. For example, at...

Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-12356)

Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability caused by injecting malicious arguments into Ant script commands. Vulnerability Details CVEID:CVE-2026-12356 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated user with command queue...

Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-13292)

Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability Vulnerability Details CVEID:CVE-2026-13292 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through...

Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-12148)

Summary IBM MQ is affected by a denial of service vulnerability due to unrestricted Java deserialization in the MQ Classes for Java Vulnerability Details CVEID:CVE-2026-12148 DESCRIPTION: IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute...

openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Generic Security Services JGSS component. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code within a sandboxed Java environment. Successful exploitation results in unauthorized information disclosure...

CVE-2026-97860

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges...

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries DLLs. When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with...

librsvg: Use-after-free when XML includes have duplicated entities

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...

RLSA-2026:90887 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Arbitrary code execution upon opening a file CVE-2026-96269 For more details...

emacs security update

An update is available for emacs. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNU Emacs is a powerful, customizable, self-documenting text editor. It provid...

RLSA-2026:90800 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: Emacs: arbitrary code execution in Flymake mode CVE-2026-96442 For more details about the...

emacs security update

An update is available for emacs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNU Emacs is a powerful, customizable, self-documenting text editor. It provide...

Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-11724)

Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability Vulnerability Details CVEID:CVE-2026-11724 DESCRIPTION: IBM MQ could allow an authenticated attacker to execute arbitrary code on a Managed File Transfer agent host due to improper validation of metadata...

Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-11376)

Summary IBM MQ has addressed a denial of service vulnerability Vulnerability Details CVEID:CVE-2026-11376 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow when processing subscription requests...

Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of...

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries DLLs. When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with...

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation is vulnerable to insecure loading of Dynamic Link Libraries (DLLs) . If an attacker places a specially crafted DLL in a directory where the installer is launched, the system may load the malicious file. This can lead ...

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries DLLs. When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with...

EUVD-2026-112752

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries DLLs. When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with...