CVE-2026-19167 Integer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-19389

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

ECHO-14A1-A31D-6FEE

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-73074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t...

Oracle Linux 7 : gstreamer1-plugins-good (ELSA-2026-49603)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49603 advisory. - Fix CVE-2026-53705 Orabug: 39822536 - Security update for CVE-2026-3083 CVE-2026-3085 Orabug: 39199326 - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613...

AlmaLinux 10 : postgresql18 (ALSA-2026:27742)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:27742 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libpq:...

Fedora 43 : libidn (2026-acf66846ee)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-acf66846ee advisory. Security fix for CVE-2026-57053. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-71261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1...

TencentOS Server 2: postgresql (TSSA-2026:0833)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0833 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-73086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoidsize function in index.js and...

TencentOS Server 2: gstreamer-plugins-bad-free (TSSA-2026:0832)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0832 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2026-19588: Integer Overflow to Buffer Overflow

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

PT-2026-80509

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj pi initialise encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

The vulnerability of the Windows GDI+ interface on Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows GDI+ interface on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...

The vulnerability of the Microsoft Outlook client, Microsoft Office packages, and 365 Apps for Enterprise, related to a potential overflow condition, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook client, Microsoft Office packages, and 365 Apps for Enterprise is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...

The vulnerability of the Microsoft Office software package, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the ZFS_IOC_RECV_NEW handler of the OpenZFS component in FreeBSD’s operating systems allows a attacker to corrupt memory.

The vulnerability of the ZFSIOCRECVNEW handler of the OpenZFS component in FreeBSD-related operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to corrupt memory...

The vulnerability of the Microsoft .NET software platform, related to integer overflow, allows attackers to escalate their privileges.

The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2026-70977

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

CVE-2026-19001: Integer Overflow or Wraparound

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...