PT-2026-70637

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An integer underflow wrap or wraparound occurs, which allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Integer underfl...

PT-2026-70479

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

PT-2026-70505

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

PT-2026-70477

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

CVE-2026-18687: Integer Underflow (Wrap or Wraparound)

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use. An authenticated user with readWrite privileges could submit a specially formed request that leads to a...

CVE-2026-48435: Integer Underflow (Wrap or Wraparound)

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-62814: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2026-62718: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

PT-2026-70375

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Underflow Wrap or Wraparound issue exists, which occurs when an arithmetic operation results in a value smaller than the minimum representable value for the data...

PT-2026-70478

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which may allow an unauthorized attacker to disclose sensitive information over an adjacent network and...

PT-2026-70503

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

PT-2026-70483

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network and...

PT-2026-70481

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which could allow an unauthorized attacker to disclose sensitive information over an adjacent network...

CVE-2026-71389: Integer Underflow (Wrap or Wraparound)

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-62714: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2026-62720: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2026-62715: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

MiracleLinux 9 : glib2-2.68.4-19.el9_8.2 (AXSA:2026-1511:12)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1511:12 advisory. glib: integer underflow in gio/gdbusintrospection.c via gdbusnodeinfonewforxml CVE-2026-58016 Tenable has extracted the preceding description block directly...

OPENSUSE-SU-2026:21549-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. - CVE-2026-58050: heap buffer...

CVE-2026-68145

In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmapset with zero-length range ifssetrangedirty and ifssetrangeuptodate compute lastblk as off + len - 1 iblkbits. When off is 0 and len is 0, the unsigned subtraction underflows to SIZEMAX, producing a...