PT-2026-107983

ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed...

MiracleLinux 8 : libpcap-1.9.1-6.el8_10 (AXSA:2026-1994:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1994:02 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description blo...

PT-2026-107772

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00 Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software...

PT-2026-108138

Name of the Vulnerable Software and Affected Versions libmongocrypt affected versions not specified Description Improper state management occurs when cleaning up a key document that contains duplicate masterKey fields, causing provider-specific data to be treated as an incompatible type. An...

Rocky Linux 8 [CIQ] Security Update: libpcap / libpcap-debuginfo / libpcap-debugsource / libpcap-devel (crlsa-2026_76045)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676045 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

RLSA-2026:76045 Important: libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fixes: libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access...

libpcap security update

An update is available for libpcap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libpcap packages provide a portable framework for low-level network...

CVE-2026-106213

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 all...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : U-Boot vulnerabilities (USN-8884-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8884-1 advisory. Timo Preil discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An...

RockyLinux 8 : libpcap (RLSA-2026:76045)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:76045 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

CVE-2026-106238

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe...

cve-2026-29923

CVE-2026-29923 — pstrip64.sys ローカル特権昇格 CVE-2026-29923 の最小限の概念実証です。これは pstrip64.sys カーネルドライバ（EnTech Taiwan PowerStrip ≤ 3.90.736）の脆弱性で、非特権ユーザーモードプロセスが NT AUTHORITY\SYSTEM に昇格できるものです。 バグ pstrip64.sys は IOCTL（0x80002008）を公開しており、ユーザー提供の物理アドレスを受け取り、\Device\PhysicalMemory を開いて現在のプロセスハンドルで...

USN-8884-1 u-boot vulnerabilities

Timo Preißl discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. CVE-2025-70290 Timo Preißl...

AZL-106329 CVE-2026-98248 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on 8,16-bit types The assembly for percpunamecasesz and percpunamereturncasesz doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a...

CVE-2026-98248

In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on 8,16-bit types The assembly for percpunamecasesz and percpunamereturncasesz doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a...

CVE-2026-98248

In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on 8,16-bit types The assembly for percpunamecasesz and percpunamereturncasesz doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a...

CVE-2026-98264

The Linux kernel contains a vulnerability in the ALSA virtio driver where virtsnd_remove() and virtsnd_freeze() delete virtqueues before resetting the device. Because del_vqs() frees the vring backing without a generic device quiesce operation, modern virtio-pci may keep enabled queues active, po...

CVE-2026-98248 arm64: percpu: Fix LSE operations on {8,16}-bit types

In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on 8,16-bit types The assembly for percpunamecasesz and percpunamereturncasesz doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a...

CVE-2026-98248 arm64: percpu: Fix LSE operations on {8,16}-bit types

In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on 8,16-bit types The assembly for percpunamecasesz and percpunamereturncasesz doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a...

EUVD-2026-93113

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: validate scan response extents mwifiexret80211scan subtracts the fixed response fields and the firmware-provided BSS length from resp-size without first proving that either extent fits. A short response or oversize...