Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...

AlmaLinux 8 : expat (ALSA-2026:64809)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64809 advisory. expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via...

RHEL 9 : glib2 (RHSA-2026:64800)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64800 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, th...

EulerOS 2.0 SP12 : openssl (EulerOS-SA-2026-3288)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...

Oracle Linux 10 : ELSA-2026-64799-0: / glib2 (ELSA-2026-647990)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-647990 advisory. - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58011: range validatio...

EulerOS 2.0 SP12 : sqlite (EulerOS-SA-2026-3313)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

RHEL 9 : expat (RHSA-2026:64812)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64812 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...

RHEL 10 : 389-ds-base (RHSA-2026:64804)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64804 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDA...

ALSA-2026:64809 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...

VulnCheck KEV: CVE-2025-25249

Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets...

VulnCheck KEV: CVE-2026-85880

Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally...

cjose -- Heap-based Buffer Overflow

https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj reports: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms alg = A128KW, A192KW,...

Security update for freeciv (important)

openSUSE security update: security update for freeciv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21800-1 Rating: important References: bsc1278695 bsc1278696 Affected Products: openSUSE Leap 16.0...

PT-2026-87980

🚨 CVE-2026-77906 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. 🎖@cveNotify...

PT-2026-87978

🚨 HIGH SEVERITY: CVE-2026-77904 CVSS 7.8 Heap-based buffer overflow in Windows Volume Manager Extension Driver enables local privilege escalation by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/fjuBA7sACZ...

PT-2026-87281

CVE-2026-68844 carries CVSS 7.8. Heap-based buffer overflow in Windows Storage Spaces Controller lets authorized low-privilege attackers run code locally. Exploitation less likely, no known in-the-wild attacks. https://t.co/NM3ozLiuBS https://t.co/tcyocQVd5S...

PT-2026-87755

We have just added an important vulnerability affecting Microsoft Windows CVE-2026-69845 https://t.co/ulFX3mqvL1...

PT-2026-87916

🚨 CVE-2026-73007 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-87624

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...

PT-2026-88113

🚨 CVE-2026-83954 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...