GHSA-7F35-6H8X-96VV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FF4P-927C-7922 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QH77-M293-98R7 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QQJW-V6CG-96J4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RF7W-2XRF-QFWR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RHP6-Q4J8-V7V5 vulnerabilities

Vulnerabilities for packages: chromium...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

CVE-2026-19174 Integer overflow in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-19167 Integer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-19389

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

ECHO-14A1-A31D-6FEE

Bulletin has no description...

PT-2026-70977

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

Oracle Linux 7 : gstreamer1-plugins-good (ELSA-2026-49603)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49603 advisory. - Fix CVE-2026-53705 Orabug: 39822536 - Security update for CVE-2026-3083 CVE-2026-3085 Orabug: 39199326 - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613...

The vulnerability of the Microsoft .NET software platform, related to integer overflow, allows attackers to escalate their privileges.

The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

TencentOS Server 2: gstreamer-plugins-bad-free (TSSA-2026:0832)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0832 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

SUSE SLED15: perl / perl-32bit / perl-base / perl-base-32bit / perl-core-DB_File / etc (SUSE-SU-2026:3558-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3558-1 advisory. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bi...

TencentOS Server 2: postgresql (TSSA-2026:0833)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0833 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-73086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoidsize function in index.js and...

Linux Distros Unpatched Vulnerability : CVE-2026-68270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible...

Linux Distros Unpatched Vulnerability : CVE-2026-73074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t...