Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003462 advisory. The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a writemmio stack-base...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001931)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001931 advisory. The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002452 advisory. The nrrecvmsg function in net/netrom/afnetrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure h...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002661)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002661 advisory. The cdromioctlmediachanged function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003057)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003057 advisory. The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a writemmio stack-base...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002833)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002833 advisory. The getrockridgefilename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM aka alternate name entries containing \0 characters, which allows...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002698 advisory. The vhcihcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001862)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001862 advisory. The atl2probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003444)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003444 advisory. The assocarrayinsertintoterminalnode function in lib/assocarray.c in the Linux kernel before 4.5.3 does not check whether a slot is a leaf, which allows local users ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002951 advisory. An issue was discovered in the Linux kernel through 4.19. An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to re...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002971 advisory. Race condition in the vopioctl function in drivers/misc/mic/vop/vopvringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001967 advisory. The pnrecvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure ha...

CVE-2026-21303

Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that ...

Vulnerabilities fixed in Adobe InDesign Desktop

Adobe has fixed vulnerabilities in InDesign Desktop Specifically for versions 21.0, 19.5.5 and earlier. The vulnerabilities include an improperly initialized pointer that leads to arbitrary code execution, a heap-based buffer overflow that also enables arbitrary code execution without further use...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001682 advisory. An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDISMSGS...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001683 advisory. An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted...

CVE-2026-21303

Substance3D Modeler v1.22.4 and earlier are affected by an Out-of-bounds Read (CWE-125) that could disclose memory contents. Exploitation requires a user to open a malicious file, potentially leading to memory disclosure. Adobe APSB26-08 notes a fixed update to 1.22.5; apply the security update t...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

MongoBleed-Pro ☠️ Advanced MongoDB Memory L...

MiracleLinux 7 : grub2-2.02-0.87.14.0.4.el7.AXS7 (AXSA:2025-9938:04)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9938:04 advisory. CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write...

MiracleLinux 9 : nginx-1.20.1-22.el9_6.2.ML.1 (AXSA:2025-10488:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10488:02 advisory. nginx: Memory corruption in the ngxhttpmp4module CVE-2022-41741 nginx: Memory disclosure in the ngxhttpmp4module CVE-2022-41742 nginx: specially...