CVE-2026-55254 NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation

NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src/NCalc.Core/Helpers/MathHelper.cs permits specially crafted expressions with extremely large factorial operands, causing excessive CPU consumption or a non-terminating loop due ...

K000162312: Linux kernel vulnerability CVE-2022-50865

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: tcp: fix a signed-integer-overflow bug in tcpaddbacklog The type of skrcvbuf and sksndbuf in struct sock is int, and in tcpaddbacklog, the variable limit is caculated by adding skrcvbuf, sksndbuf and...

CVE-2026-40469

A flaw was found in gawk. An integer overflow vulnerability exists in the dosub routine, which could allow an attacker to overwrite internal program data. This can lead to a denial of service DoS by causing the gawk program to crash. This issue affects 32-bit builds of gawk. Mitigation Mitigation...

SUSE-SU-2026:3099-1 Security update for dash

This update for dash fixes the following issues - CVE-2026-31323: arithmetic expansion evaluating INTMAXMIN / -1 can lead to a signed integer overflow and a denial of service bsc1269494...

wget: Fix of 2 CVEs

CVE-2026-58470: fix integer overflow in Content-Range header parsing - CVE-2026-58472: fix integer/heap buffer overflow in HTML attribute entity encoding...

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record

...

EUVD-2026-45059

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network...

Oracle Linux 10 : rsync (ELSA-2026-26332)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-26332 advisory. - Resolves: RHEL-174929 - TOCTOU symlink race condition CVE-2026-29518 - Resolves: RHEL-174949 - Memory disclosure via int overflow CVE-2026-43618...

Oracle Linux 10 : poppler (ELSA-2026-24985)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-24985 advisory. - Fix integer overflow in tilingPatternFill CVE-2026-10118 - Fix integer overflow in tilingPatternFill CVE-2026-10118 Tenable has extracted the preceding...

RHEL 10 : pacemaker (RHSA-2026:41041)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:41041 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in...

RHEL 9 : pacemaker (RHSA-2026:41042)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:41042 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in t...

Storage Spaces Direct Windows Code Execution

The vulnerability of the Storage Spaces Direct distributed storage function in Windows operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

NTFS Privilege Escalation

The vulnerability of the NTFS file system in Windows operating systems is related to integer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-59117

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network...

CVE-2026-59117

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network...

Important: Red Hat Security Advisory: pacemaker security update

An update for pacemaker is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial...

pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial...

pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial...

Important: Red Hat Security Advisory: pacemaker security update

An update for pacemaker is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...