The vulnerability of the Security Health Service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Security Health Service for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Reliable Multicast Transport Driver (RMCAST) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Samsung Galaxy A57 Android 16 sgpu Driver Use-After-Free

Samsung Galaxy A57 devices running Android version 16 contain a use-after-free race in the sgpu driver’s sgpugemcreate function. The proof of concept races GEM creation and close ioctls to trigger BO swap-list corruption. Samsung sgpu: sgpugemcreate calls sgpuswapaddbo on dangling BO...

EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-3921)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

Fedora 44 : chromium (2026-bcdfa4c7db)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bcdfa4c7db advisory. Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG...

kernel security, bug fix, and enhancement update

6.12.0-211.64.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:22023-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22023-1 advisory. Changes in chromium: - Chromium 154.0.8037.97 boo1284015 CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103626: Incorrect authorization ...

EulerOS 2.0 SP15 : perl-HTML-Parser (EulerOS-SA-2026-4003)

According to the versions of the perl-HTML-Parser package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTML::Entities versions before 3.84 for Perl read freed heap memory in decodeentities.x000D x000D The XS routine backing...

Linux Distros Unpatched Vulnerability : CVE-2026-98305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xxsetup arms the stats poll...

Fedora 43 : chromium (2026-02902c2fa0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-02902c2fa0 advisory. Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG...

Linux Distros Unpatched Vulnerability : CVE-2026-98258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 convert...

EulerOS 2.0 SP15 : libarchive (EulerOS-SA-2026-3918)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

EulerOS 2.0 SP15 : util-linux (EulerOS-SA-2026-3956)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition...

Linux Distros Unpatched Vulnerability : CVE-2026-107183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b11393 contains a use-after-free and double free vulnerability in commonchatpegmapper::map that allows unauthenticated remote attackers to...

RHEL 9 : thunderbird (RHSA-2026:77627)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:77627 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Worke...

EulerOS 2.0 SP15 : libarchive (EulerOS-SA-2026-3984)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

ROS-20261008-73-0120

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791458607)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791458607 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP...

RHEL 10 : kernel (RHSA-2026:77634)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77634 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fs/notify: call...

EulerOS 2.0 SP15 : expat (EulerOS-SA-2026-3974)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse.CVE-2026-56406 libexpat befo...