kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...

Vulnerabilities in Microsoft Windows

Microsoft has fixed a large number of vulnerabilities in Windows. An attacker could exploit these vulnerabilities to carry out attacks that could result in the following types of damage, as listed in the table below. The most severe vulnerabilities are identified by the following CVE numbers:...

CVE-2026-65796

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-65791

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-65681

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

CVE-2026-65679

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

EUVD-2026-56744

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

CVE-2026-65796

The CVE-2026-65796 entry describes a heap-based buffer overflow in the Windows iSCSI Target Service that allows an unauthenticated attacker to cause a denial of service over the network. Affected component: Windows iSCSI Target Service. Root cause: heap-based overflow leading to service disruptio...

CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

EUVD-2026-56738

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-65791

CVE-2026-65791 : Heap-based buffer overflow in Windows iSCSI Target Service enables remote code execution over a network. Affected: Windows iSCSI Target Service. Root cause: heap-based overflow. Impact: unauthorized code execution with high confidentiality, integrity, and availability implication...

CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

EUVD-2026-56726

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

CVE-2026-65679

Summary: CVE-2026-65679 is a heap-based buffer overflow in the Windows iSCSI Target Service that allows remote code execution over a network. The vulnerability arises from an out-of-bounds write handling, enabling an unauthenticated attacker to execute code on affected systems. The CVSSv3.1 vecto...

CVE-2026-65681

CVE-2026-65681 : A null pointer dereference in the Windows iSCSI Target Service allows an unauthenticated, remote attacker to cause a denial of service over the network. The NVD entry states a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no privileges requ...