CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

EUVD-2026-90773

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

BIT-DOTNET-SDK-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

BIT-DOTNET-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

Important: Red Hat Security Advisory: gvfs security update

An update for gvfs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RLSA-2026:73997 Important: gvfs security update

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol FTP, Secure Shell File Transfer Protocol SFTP, Web Distributed Authoring and Versioning WebDAV, Common Internet File System CIFS, Server Message Block SMB, and...

gvfs security update

An update is available for gvfs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GVFS is the GNOME Desktop Virtual File System layer that allows users to easily...

CLEANSTART-2024-BZ36226 heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

Security vulnerability affects the heimdal package. A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal...

SUSE CVE-2026-103242

A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content - of attacker-chosen...

PT-2026-103839

Name of the Vulnerable Software and Affected Versions tnef affected versions not specified Description A heap-based buffer overflow occurs in the find free number function during the generation of numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file...

Rocky Linux 8 [CIQ] Security Update: ncurses / ncurses-base / ncurses-c++-libs / etc Multiple Vulnerabilities (crlsa-2021_4426)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214426 advisory. ncurses: heap-based buffer overflow in the ncfindentry function in tinfo/comphash.c CVE-2019-17594 ncurses: heap-based buffer overflow in the fmtentry...

CentOS Linux 7 [TuxCare] Security Update: squid / squid-migration-script / squid-sysvinit Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786353802)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786353802 advisory. - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway...

Rocky Linux 10.1 [CIQ] Security Update: qt6-qtquick3d / qt6-qtquick3d-debuginfo / qt6-qtquick3d-debugsource / etc (crlsa-2025_22361)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202522361 advisory. assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow CVE-2025-11277 Tenable has extracted the preceding description block...

Rocky Linux 8 [CIQ] Security Update: freetype / freetype-debuginfo / freetype-debugsource / etc (crlsa-2020_4952)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204952 advisory. freetype: Heap-based buffer overflow due to integer truncation in LoadSBitPng CVE-2020-15999 Tenable has extracted the preceding description block directly from the...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779371406)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779371406 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer Size ...

AlmaLinux 9.2 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel (ALMALINUX9.2:CLSA-2026:1790352190)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790352190 advisory. - A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast...

Rocky Linux 9 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel Multiple Vulnerabilities (crlsa-2026_64812)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202664812 advisory. expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.2:CLSA-2025:1737024983)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1737024983 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. CVE-2023-0288 Note that Nessus has not tested for this issue but...