CVE-2026-91950: Out-of-bounds Read

FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdrdumppacket function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigg...

PT-2026-92069

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An out-of-bounds read occurs in the rdpdr dump packet function due to a 32-bit unsigned integer wraparound during buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet wit...

PT-2026-92079

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An integer overflow exists in the Stream EnsureRemainingCapacity function within WinPR. A remote attacker acting as a malicious RD Gateway peer can send a WebSocket Ping frame containing a crafted...

CVE-2026-91746: Integer Overflow or Wraparound

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-92081

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An integer overflow exists in the audin Apple backends when processing FramesPerPacket values from MSG SNDIN OPEN messages. An attacker can provide crafted FramesPerPacket values that cause the size...

CVE-2026-55351: Integer Overflow or Wraparound

In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-92248: Integer Overflow or Wraparound

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

Google Chrome < 153.0.8010.47 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 153.0.8010.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0541751186 advisory. - Use after free in Workers in Google Chrome prior to 153.0.8010.47...

RockyLinux 9 : postgresql:16 (RLSA-2026:67491)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67491 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitra...

Linux Distros Unpatched Vulnerability : CVE-2026-91960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's StreamEnsureRemainingCapacity function that allows remote attackers to cause denial of...

ALSA-2026:67468 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address CVE-2025-71127 kernel: KVM: nSVM: Always use vmcb01 in...

Linux Distros Unpatched Vulnerability : CVE-2026-91962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can...

AlmaLinux 8 : kernel (ALSA-2026:67468)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67468 advisory. kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address CVE-2025-711...

AlmaLinux 8 : kernel-rt (ALSA-2026:67469)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67469 advisory. kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address CVE-2025-711...

RHEL 8 : kernel (RHSA-2026:67468)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67468 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: EDAC/bluefield: Fix potential...

Linux Distros Unpatched Vulnerability : CVE-2026-92248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer...

RHEL 9 : postgresql:16 (RHSA-2026:67491)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67491 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

ALSA-2026:67491 Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

Linux Distros Unpatched Vulnerability : CVE-2026-91950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdrdumppacket function due to 32-bit unsigned integer wraparound in buffer bounds...

ALSA-2026:67469 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast addre...