PT-2026-88476

🚨 CVE-2026-81977 Acrobat Reader is affected by an Integer Underflow Wrap or Wraparound vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a...

Linux Distros Unpatched Vulnerability : CVE-2026-18711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used...

CVE-2026-67277

MikroTik RouterOS btest service is vulnerable to unauthenticated kernel memory disclosure and denial of service . An unauthenticated attacker can exploit a race condition where a "related" btest connection is accepted before primary session authentication completes, then start an IPv4 UDP test. W...

CVE-2026-67277 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...

CVE-2026-67277 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...

ALPINE-CVE-2026-31912

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

CVE-2026-31912

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

AZL-99921 CVE-2026-31912 affecting package nmap 7.95-5

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

AZL-99741 CVE-2026-31912 affecting package libpcap for versions less than 1.10.7-1

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

CVE-2026-18238

libpcap versions before 1.10.7 are affected by an out-of-bounds read in the rpcap client . The code that processes an RPCAP_MSG_PACKET message from the server incorrectly validates its headers, allowing a malicious server to cause the client to treat up to 20 bytes of client process memory beyond...

EUVD-2026-72021

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

CVE-2026-31912

libpcap before 1.10.7 contains an out-of-bounds read in its BPF interpreter . The interpreter fails to detect two conditions: reaching the end of the filter program buffer due to a missing return instruction, and executing a jump instruction whose offset translates to a pointer outside the buffer...

EUVD-2026-72016

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

CVE-2026-31912 OOBR in libpcap before 1.10.7

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

CVE-2026-31912

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

SUSE CVE-2026-80791

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: zero the AUTHRECEIVE response buffer nvmetexecuteauthreceive allocates the response buffer with kmalloc sized by the host-supplied AUTHRECEIVE allocation length, but the DH-HMAC-CHAP builders write only a fixed-size...

Debian dla-4773 : libssh2-1 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4773 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4773-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-31912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with ...

PT-2026-86441

The rpcap client code that processes a RPCAP MSG PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of t...

AlmaLinux 10 : freerdp (ALSA-2026:61378)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61378 advisory. FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses CVE-2026-67297 FreeRDP: FreeRDP: Memory disclosure or denial of service vi...