EulerOS 2.0 SP11 : haproxy (EulerOS-SA-2026-4326)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP11 : lcms2 (EulerOS-SA-2026-4333)

According to the versions of the lcms2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

EulerOS 2.0 SP11 : haproxy (EulerOS-SA-2026-4235)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP13 : haproxy (EulerOS-SA-2026-4144)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP11 : lcms2 (EulerOS-SA-2026-4242)

According to the versions of the lcms2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

emacs security update

1:26.1-15.2 - Fix TRAMP user name shell injection vulnerability CVE-2026-79992 - Resolves: RHEL-248545 1:26.1-15.1 - Fix integer overflow in PBM image loader CVE-2026-77219 - Resolves: RHEL-248064...

emacs security update

1:27.2-18.el98.2 - Fix integer overflow in pbmload image validation RHEL-248067 1:27.2-18.el98.1 - Restrict Tramp user name to fix CVE-2026-79992 RHEL-248552...

CVE-2026-98317

A flaw was found in the Linux kernel. A local user with network configuration privileges can cause a Denial of Service DoS by supplying out-of-range neighbor probe interval values via Netlink or sysctl. Because the kernel fails to properly validate these boundary values, an integer overflow occur...

Linux Distros Unpatched Vulnerability : CVE-2026-107324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON...

CVE-2026-107820

x64dbg-MCP Server is a native Model Context Protocol MCP plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcpserver.zig parses an unbounded Content-Length value in parseContentLength and uses it in unchecked usize addition in wsRecv before token...

CVE-2026-107820 x64dbg-MCP Server vulnerable to pre-authentication denial of service through Content-Length integer overflow

x64dbg-MCP Server is a native Model Context Protocol MCP plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcpserver.zig parses an unbounded Content-Length value in parseContentLength and uses it in unchecked usize addition in wsRecv before token...

CVE-2026-107820 x64dbg-MCP Server vulnerable to pre-authentication denial of service through Content-Length integer overflow

x64dbg-MCP Server is a native Model Context Protocol MCP plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcpserver.zig parses an unbounded Content-Length value in parseContentLength and uses it in unchecked usize addition in wsRecv before token...

CVE-2026-107820

The x64dbg-MCP Server (prior to version 1.2 ) is vulnerable to a pre-authentication denial of service due to an integer overflow in src/core/mcp_server.zig. The parseContentLength() function fails to bound the Content-Length value, which is subsequently used in an unchecked usize addition within ...

CVE-2026-83632

A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS or memory corruption by sending specially crafted network requests to services utilizing the C++ HTTP transport layer. Due to improper input validation and resource handling, these requests trigger an integer...

Security Bulletin: Security vulnerability in Java affects IBM Robotic Process Automation

Summary A security vulnerability in Java affects IBM Robotic Process Automation. Java is used by IBM Robotic Process Automation as part of its deployment. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS...

CVE-2026-96396

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...

CLSA-2026-1791551522 Fix CVE(s): CVE-2020-12762

SECURITY UPDATE: integer overflow and out-of-bounds write in printbuf - debian/patches/CVE-2020-12762.patch: reject sizes that overflow int in printbufextend, printbufmemappend and printbufmemset printbuf.c - CVE-2020-12762...

CVE-2026-98222

A flaw was found in the Linux kernel's encrypted keys subsystem. An integer overflow occurs during memory size calculations for key data, resulting in an undersized buffer allocation. A local user can exploit this issue by supplying crafted key data to trigger an out-of-bounds write to kernel...

OPENSUSE-SU-2026:22078-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283672. Changes for google-osconfig-agent: - Update to version...

CVE-2026-96396

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...