PT-2026-70784

Name of the Vulnerable Software and Affected Versions anoid versions prior to 3.3.12 anoid versions prior to 5.1.11 Description The nanoidsize function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer. Providing a value of 2147483648 causes it to...

PT-2026-70241

Name of the Vulnerable Software and Affected Versions Undertow HTTP server affected versions not specified WildFly affected versions not specified JBoss EAP affected versions not specified Description A flaw exists in the ChunkReader component of the Undertow HTTP server, which is utilized by...

CVE-2026-15562: Integer Overflow or Wraparound

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...

CVE-2026-62822: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

Fedora 43 : p11-kit (2026-e281fdcb69)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e281fdcb69 advisory. rpc: guard against overflow when decoding nested attributes CVE-2026-18938 Only affects 32 bit systems Tenable has extracted the preceding description block...

Security Updates for Microsoft Outlook Products (August 2026)

The Microsoft Outlook Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-70329 - Heap-based buffer overflow in...

Security Updates for Microsoft Office Products (August 2026)

The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-63513, CVE-2026-63533, CVE-2026-65661 - Integer overflow or...

CVE-2026-73086: Integer Overflow or Wraparound

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoidsize function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 2147483648 to become -2147483648 and corru...

SUSE SLES12 Security Update : perl (SUSE-SU-2026:3540-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3540-1 advisory. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds bsc1266304. -...

Fedora 43 : mingw-libidn (2026-7ddafb24a3)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7ddafb24a3 advisory. Update to 1.44. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

PT-2026-70224

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.3 Description A heap out-of-bounds write can occur during OCR recognition when a crafted .traineddata LSTM model component is loaded through the deserializer. This happens because an unchecked signed integer...

CVE-2026-47940: Integer Overflow or Wraparound

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Fedora 43 : chromium (2026-06d89684d6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-06d89684d6 advisory. chromium-151.0.7922.108 security release fix 41 CVE CVE-2026-19137: Use after free in WebGL CVE-2026-19138: Heap buffer overflow in CrashReporting...

(Pwn2Own) Microsoft Windows storport Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport drive...

(Pwn2Own) Microsoft Windows http.sys Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the http.sys drive...

PT-2026-80491

A flaw was found in GLib. A state confusion issue exists in g dbus node info new for xml in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a node element nested within other elements like method, signal, property or arg. This issue can cause...

DEBIAN-CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

UBUNTU-CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

CVE-2026-6426

QEMU's vhost inflight migration VMState handling is affected by a type‑mismatch in the destination buffer size: it is stored as uint64_t but read as signed int32_t. On little‑endian hosts, a crafted incoming migration state with bit 31 set can become negative and be implicitly converted to a very...