CVE-2026-42616

A heap buffer overflow exists in the ntfs-3g driver (versions prior to 2026.7.7 ) within the cat() function in ntfscat.c . An attacker can exploit this vulnerability by crafting a malicious NTFS image , which triggers the overflow when a file is read. This flaw allows for the corruption of heap m...

CVE-2026-46570

A heap buffer overflow exists in NTFS-3G before version 2026.7.7 within the ntfs_index_walk_down() function in libntfs-3g/index.c. An attacker can exploit this by crafting a malicious NTFS image with manipulated file metadata. When the SUID-root ntfs-3g binary processes this image, the overflow a...

CVE-2026-46571

A out-of-bounds read vulnerability exists in NTFS-3G before version 2026.7.7 within the ntfs_fix_file_name() function in libntfs-3g/reparse.c. An attacker can exploit this by crafting a malicious NTFS image to trigger a readlink on a corrupted file, potentially allowing them to read confidential ...

CVE-2026-46572

A heap buffer overflow exists in the NTFS-3G driver (before version 2026.7.7 ) within the ntfs_ib_cut_tail() function located in libntfs-3g/index.c. An attacker can exploit this by crafting a malicious NTFS image and creating a file in a specially crafted directory. This vulnerability allows for ...

Linux Distros Unpatched Vulnerability : CVE-2026-106300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside...

Linux Distros Unpatched Vulnerability : CVE-2026-106304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-106370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read...

Linux Distros Unpatched Vulnerability : CVE-2026-106215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-106223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-106258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-106290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read...

Linux Distros Unpatched Vulnerability : CVE-2026-104046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memo...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : U-Boot vulnerabilities (USN-8884-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8884-1 advisory. Timo Preil discovered that U-Boot incorrectly handled certain malformed ZFS file system...

CVE-2026-106450

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, ne...

RockyLinux 8 : libpcap (RLSA-2026:76045)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:76045 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

EUVD-2026-94353

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...

Oracle Linux 8 : dovecot (ELSA-2026-76763)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76763 advisory. - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 - fix CVE-2026-42007: heap use-after-free in...

PT-2026-107646

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

The vulnerability of the Microsoft Visual Studio software lies in the fact that operations are performed outside the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Visual Studio software lies in the fact that operations are performed outside the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...