CVE-2019-19012

CVE-2019-19012 An integer overflow in the searchinrange function in regexec.c in Oniguruma 6.x before 6.9.4rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. This only affects the 32-bit compiled version. Remote attackers can cause a...

CVE-2025-3500-Poc

Lab: CVE-2025-3500 - Integer Overflow in Avast Antivirus Privilege Escalation Download Download Lab ZIP : https://github.com/chicken3962/CVE-2025-3500-Poc/releases/download/Release/cve-2025-3500.zip 🚀 Overview This repository provides a lab environment for researching CVE-2025-3500, an integer...

CVE-2026-59346-POC

CVE-2026-59346 — VMXNET3 TSO Integer Overflow VMware Workstation / Fusion Proof-of-concept for a 32-bit integer overflow in the VMXNET3 virtual NIC's TSO segmentation path in vmware-vmx, reachable from a guest VM. This issue is patched. The PoC is published for research and defensive purposes onl...

CLEANSTART-2026-MS71426 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...

CVE-2026-39834 affects multiple packages. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. See references for individu...

Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2026-130394)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130394 advisory. An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying ...

Microsoft Windows Raw Image Extension < 2.4.36.0 / 2.5.35.0 RCE (October 2026)

The Windows 'Raw Image Extension' app installed on the remote host is prior to 2.4.36.0 2.5.35.0 on Windows 11 versions 21H2 and 26H2. It is, therefore, affected by multiple remote code execution vulnerabilities: - A heap-based buffer overflow vulnerability exists in the losslessjpegloadraw...

AlmaLinux 9.2 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792080478)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792080478 advisory. - GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp- user-regexp has an...

CVE-2026-107348

Integer overflow in the message buffer growth logic mbufmakeroom in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when maxpacketsize is configured above 2147483648. A packet header declaring a length above 2^31 makes the buffer size computation overflow,...

UBUNTU-CVE-2026-86849

A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend...

UBUNTU-CVE-2026-107348

Integer overflow in the message buffer growth logic mbufmakeroom in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when maxpacketsize is configured above 2147483648. A packet header declaring a length above 2^31 makes the buffer size computation overflow,...

CVE-2026-86849

A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend...

CVE-2026-109730

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109723

Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

kernel security, bug fix, and enhancement update

4.18.0-553.174.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2026-130393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130393 advisory. An integer overflow in the yuv2planeX8c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a...

Rocky Linux 8 [CIQ] Security Update: pcre2 / pcre2-debuginfo / pcre2-debugsource / pcre2-devel / etc Multiple Vulnerabilities (crlsa-2026_81613)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202681613 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 pcre2: PCRE2: Out-of-bounds write via lar...

SUSE SLES15 Security Update : amazon-cloudwatch-agent (SUSE-SU-2026:4662-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4662-1 advisory. This update for amazon-cloudwatch-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow ...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130355 advisory. Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. Tenable...

SUSE SLES15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2026:4676-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4676-1 advisory. WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome...

SUSE SLES15 Security Update : google-osconfig-agent (SUSE-SU-2026:4661-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4661-1 advisory. This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in...