PT-2026-76997

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird ESR versions prior to 140.14 Thunderbird ESR versions prior to 153.1 Description An integer...

PT-2026-80459

New API: Integer overflow in quota billing yields negative charges self-crediting in github.com/QuantumNous/new-api...

Apple Security Advisory 08-17-2026-3

Apple Security Advisory 08-17-2026-3 - macOS Tahoe 26.6.2 addresses code execution, integer overflow, out of bounds access, out of bounds read, and use-after-free vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-72302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in controlupdate size calc In...

Oracle Linux 10 : haproxy (ELSA-2026-55679)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-55679 advisory. - Fix uint16t overflow in FCGI demux record length CVE-2026-55203 Resolves: RHEL-211068 Tenable has extracted the preceding description block directl...

AlmaLinux 9 : gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free (ALSA-2026:55865)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55865 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 gstreamer:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102131 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: reject invalid perturb period Gerrard Tai reported that SFQ perturbperiod has n...

RHEL 10 : haproxy (RHSA-2026:55679)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:55679 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes:...

PT-2026-77010

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description An integer overflow occurs within the Graphics component. An integer overflow is a condition...

Linux Distros Unpatched Vulnerability : CVE-2026-72298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qrtr: fix 32-bit integer overflow in qrtrendpointpost qrtrendpointpost validates an incoming packet with if !size || len != ALIGNsize, 4 + hdrlen goto err;...

PT-2026-80456

Integer overflow in BTF parsing in github.com/cilium/ebpf...

PT-2026-77213

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.1 Description An issue exists where the ValueReader.readBytes function in src/main/java/com/rabbitmq/client/impl/ValueReader.java allocates a byte array based on a wire-declared contentLength...

CVE-2026-74977: Integer Overflow or Wraparound

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

Linux Distros Unpatched Vulnerability : CVE-2026-62897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. CVE-2026-62897 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2026-72310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix overflow in passthrough ioctl bounds check smb2ioctlqueryinfo validates the PASSTHRUFSCTL response payload before copying it to userspace. The...

Linux Distros Unpatched Vulnerability : CVE-2026-72105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitsetsize overflow on 32bit machines Commit c20e36b7631d dm log: fix...

Linux Distros Unpatched Vulnerability : CVE-2026-72068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds with u64 nsecs = rlimnew NSECPERSEC; On...

RockyLinux 10 : haproxy (RLSA-2026:55679)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55679 advisory. haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 haproxy: HAProxy: Response smuggling due to integer overflow in...

RockyLinux 9 : gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free (RLSA-2026:55865)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55865 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 gstreamer:...

Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-018 (ALASGIMP-2026-018)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2GIMP-2026-018 advisory. A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a ro...