The vulnerability of the ZFS_IOC_RECV_NEW handler of the OpenZFS component in FreeBSD’s operating systems allows a attacker to corrupt memory.

The vulnerability of the ZFSIOCRECVNEW handler of the OpenZFS component in FreeBSD-related operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to corrupt memory...

The vulnerability of the Microsoft .NET software platform, related to integer overflow, allows attackers to escalate their privileges.

The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Microsoft Office software package, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Microsoft Outlook client, Microsoft Office packages, and 365 Apps for Enterprise, related to a potential overflow condition, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook client, Microsoft Office packages, and 365 Apps for Enterprise is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...

The vulnerability of the Windows GDI+ interface on Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows GDI+ interface on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...

AlmaLinux 10 : postgresql18 (ALSA-2026:27742)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:27742 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libpq:...

Linux Distros Unpatched Vulnerability : CVE-2026-73074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t...

Oracle Linux 7 : gstreamer1-plugins-good (ELSA-2026-49603)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49603 advisory. - Fix CVE-2026-53705 Orabug: 39822536 - Security update for CVE-2026-3083 CVE-2026-3085 Orabug: 39199326 - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613...

Fedora 43 : libidn (2026-acf66846ee)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-acf66846ee advisory. Security fix for CVE-2026-57053. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-71261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1...

Linux Distros Unpatched Vulnerability : CVE-2026-73066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an uncheck...

SUSE CVE-2026-68099

In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on checkaddoverflow to avoid malformed ACL checkaddoverflow unconditionally writes the truncated sum into d even on overflow, per its contract in include/linux/overflow.h. The four checkaddoverflow guards...

CVE-2026-43627

A flaw was found in llama.cpp. An integer overflow vulnerability exists in the llamabatchinit function due to unchecked multiplications during memory allocation. Attackers can provide specially crafted input parameters, leading to heap corruption. This could potentially allow for arbitrary code...

TPM 2.0 Reference Code Vulnerabilities - Discrete TPMs - Lenovo Support US

No description provided...

CVE-2026-68099

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An integer overflow vulnerability exists when processing Access Control Lists ACLs. This flaw can lead to a malformed ACL, which, when re-parsed by clients or ksmbd itself, may trigger out-of-bounds reads. Thi...

CVE-2026-71849 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-FX4Q-GJRX-2JW6 Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...

Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the process. An attacker can achieve code execution with the privileges of the user by supplying specially crafted input that triggers an integer overflow duri...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the process. An attacker can achieve code execution with the privileges of the user by supplying specially crafted input that triggers an integer overflow duri...