[SECURITY] Fedora 43 Update: unshield-1.6.2-7.fc43

This tool allows the extraction of InstallShield format cabinet files which are different from Microsoft cabinet files. It was initially developed as a part of the SynCE project to aid with installing applications for Pocket PC devices, which were often contained in InstallShield installers, but...

CVE-2026-110716

A flaw was found in unshield. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the application. By tricking a user or system into processing a specially crafted InstallShield cabinet file with manipulated header offsets or file counts, an attacker can trigger an...

Linux Distros Unpatched Vulnerability : CVE-2026-110716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshieldgetfiletable that allows attackers to read past heap allocations via unchecke...

CVE-2026-110716 unshield through 1.6.2 Heap Out-of-Bounds Read via unshield_get_file_table

unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshieldgetfiletable that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range filetableoffset or large file counts to...

CVE-2026-110716

The unshield through 1.6.2 tool and its associated library are vulnerable to a heap out-of-bounds read in the unshield_get_file_table() function. This issue occurs because the software fails to validate cabinet header offsets , allowing an attacker to provide a crafted InstallShield cabinet with ...

CVE-2026-4869

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the...

CVE-2026-4869 Potential Privilege Escalation in InstallShield

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the...

CVE-2026-4869 Potential Privilege Escalation in InstallShield

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the...

EUVD-2026-98744

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the...

CVE-2026-4869

A potential privilege escalation issue exists in InstallShield version 2025 R2 and earlier . The vulnerability occurs when a local administrator executes a compressed Basic MSI setup with Prerequisites from an insecure location. Because the Prerequisite installers may also be loaded from an unsec...

PT-2026-111592

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the...

CVE-2026-4869: Untrusted Search Path

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the...

CLSA-2026-1787337364 clamav: Fix of 5 CVEs

CVE-2026-20213: fix Aspack-triggered PE rebuild integer overflow leading to heap buffer overflow write - CVE-2026-20214: fix FSG unpacker section loop underflow leading to out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow leading to heap under-allocation and out-of-bounds...

CLSA-2026-1784210640 Fix CVE(s): CVE-2026-20215, CVE-2026-20216, CVE-2026-20217

SECURITY UPDATE: Out-of-bounds write via 7z substream count overflow - debian/patches/CVE-2026-20215.patch: reject 7z archives whose total unpack-stream count would overflow UInt32 before it is accumulated in libclamav/7z/7zIn.c - CVE-2026-20215 SECURITY UPDATE: Denial of service via InstallShiel...

ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability

...

Security update for clamav

This update for clamav fixes the following issues CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service bsc1270107. CVE-2026-20214: FSG file format parser could allow an unauthenticated, remote attacker to cause a denial of service...

Security update for clamav

This update for clamav fixes the following issues CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service bsc1270107. CVE-2026-20214: FSG file format parser could allow an unauthenticated, remote attacker to cause a denial of service...

SUSE-SU-2026:2833-1 Security update for clamav

This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service bsc1270107. - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remote attacker to cause a denial of service...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : ClamAV vulnerabilities (USN-8517-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8517-1 advisory. It was discovered that ClamAV incorrectly handled certain PE files. A remote attacker could possibly use this issue to cause Clam...

USN-8517-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled certain PE files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2026-20213, CVE-2026-20214, CVE-2026-20217 It was discovered that ClamAV incorrectly handled certain 7z archive files...