GHSA-FF4P-927C-7922 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QH77-M293-98R7 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QQJW-V6CG-96J4 vulnerabilities

Vulnerabilities for packages: chromium...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

CVE-2026-19174 Integer overflow in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-19167 Integer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-19389

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

ECHO-14A1-A31D-6FEE

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-73074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t...

Oracle Linux 7 : gstreamer1-plugins-good (ELSA-2026-49603)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49603 advisory. - Fix CVE-2026-53705 Orabug: 39822536 - Security update for CVE-2026-3083 CVE-2026-3085 Orabug: 39199326 - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613...

AlmaLinux 10 : postgresql18 (ALSA-2026:27742)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:27742 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libpq:...

Fedora 43 : libidn (2026-acf66846ee)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-acf66846ee advisory. Security fix for CVE-2026-57053. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-71261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1...

TencentOS Server 2: postgresql (TSSA-2026:0833)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0833 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-73086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoidsize function in index.js and...

TencentOS Server 2: gstreamer-plugins-bad-free (TSSA-2026:0832)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0832 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2026-19588: Integer Overflow to Buffer Overflow

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

PT-2026-80509

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj pi initialise encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

The vulnerability of the Windows GDI+ interface on Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows GDI+ interface on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...

The vulnerability of the Microsoft Outlook client, Microsoft Office packages, and 365 Apps for Enterprise, related to a potential overflow condition, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook client, Microsoft Office packages, and 365 Apps for Enterprise is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...