Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099525 advisory. Externally-controlled format string in PostgreSQL timeofday function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099703 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100495)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100495 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfatfinddirentry In exfatfinddirentry, each TYPEEXTEND file nam...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101087 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS...

ALSA-2026:55541 Important: nodejs22 security update

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

PT-2026-76840

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

PT-2026-76838

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Visiting a maliciously crafted website may leak sensitive data...

PT-2026-76855

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

PT-2026-76688

A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...

PT-2026-76858

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

PT-2026-76822

Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons m...

PT-2026-76859

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description A use after free issue, which occurs when a program continues to use a pointer after it has been freed, can be exploited by a remote...

PT-2026-76815

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

PT-2026-76839

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

PT-2026-76836

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6.1 iOS versions prior to 18.7.10 iPadOS versions prior to 18.7.10 iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description A use-after-free issue exists in the...

The vulnerability of the k3-socinfo component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the k3-socinfo component in the Linux operating system’s kernel is related to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `nvme_alloc_admin_tag_set()` function in the `drivers/nvme/host/core.c` file of the NVME driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nvmeallocadmintagset function in the drivers/nvme/host/core.c file of the NVME driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100527)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100527 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count rmif3ainitialize takes the GPIO...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099788 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crushdecode A message of type CEPHMSGOSDMAP...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100496 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...