OESA-2026-3965 poco security update

This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...

OESA-2026-3966 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

OESA-2026-3963 poco security update

This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...

OESA-2026-3964 poco security update

This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...

OESA-2026-3908 openjdk-1.8.0 security update

The OpenJDK runtime environment 8. Security Fixes: An integer overflow in the ttvarloaditemvariationstore function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed...

OESA-2026-3904 openjdk-1.8.0 security update

The OpenJDK runtime environment 8. Security Fixes: An integer overflow in the ttvarloaditemvariationstore function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed...

OESA-2026-3887 libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

OESA-2026-3885 libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

OESA-2026-3884 libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

Exploit for Improper Input Validation in Microsoft

CVE-2023-21554 — QueueJumper PoC Proof of concept for CVE-2...

SUSE-SU-2026:23850-1 Security update for corosync

This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. - CVE-2026-81666: integer overflow in checkmembcommittokensanity may bypass message length validation on 32-bit systems...

OPENSUSE-SU-2026:21887-1 Security update for corosync

This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. - CVE-2026-81666: integer overflow in checkmembcommittokensanity may bypass message length validation on 32-bit systems...

CVE-2026-94030: Integer Overflow or Wraparound

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

PT-2026-96009

Name of the Vulnerable Software and Affected Versions JusticeRage Manalyze version 1.0.0 Description An integer underflow occurs in the PE Parser component within the PE:: parse debug function located in the manape/pe.cpp file. This issue can be triggered remotely by manipulating the misc.Length...

PT-2026-95972

Name of the Vulnerable Software and Affected Versions SerenityOS versions up to 3d83e4509fd20d7438e1ae8470ffe668c136229c Description An integer overflow occurs in the decode bmp pixel data function within the Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp file of the LibGfx component. This...

CVE-2026-94090: Integer Underflow (Wrap or Wraparound)

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::parsedebug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patc...

Fedora 45 : nss (2026-9b9d903069)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b9d903069 advisory. NSS Release Notes Update NSS to 3.129.0 - Bug 2017322 - set CKANSSSERVERDISTRUSTAFTER for CN=Izenpe.com. - Bug 2025246 - fix unknown key error type in...

Exploit for CVE-2026-74469

⚡ CVE-2026-74469 — DiagSpill Linux Kernel SCTP Peer T...

Exploit for CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux Kernel TUN/TAP Rece...

SUSE CVE-2026-89818

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and the bounds check passes, letting the parser loop far past the end of...