Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100496 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100527)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100527 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count rmif3ainitialize takes the GPIO...

The vulnerability of the nf_conncount module in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfconncount module in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the adxl380_irq_handler() function in the drivers/iio/accel/adxl380.c module of various types of embedded sensors of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adxl380irqhandler function in the drivers/iio/accel/adxl380.c module of various types of embedded sensors in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100928 advisory. Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that wit...

The vulnerability of the k3-socinfo component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the k3-socinfo component in the Linux operating system’s kernel is related to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-76756

Name of the Vulnerable Software and Affected Versions TIER IV Nebula versions prior to 1.2.1 Description An out-of-bounds read exists in the Vlp32Decoder::unpack function. This allows unauthenticated remote attackers to cause the decoder to read past the end of a received UDP buffer into adjacent...

PT-2026-76823

Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk::assemble in src/lib/deskflow/ClipboardChunk.cpp, causing the server path in src/lib/server/ClientProxy1 6.cpp or client path i...

PT-2026-73404

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...

PT-2026-76645

Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

Important: jackson-core

Issue Overview: The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of...

PT-2026-73271

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

PT-2026-76832

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.10 iPadOS versions prior to 18.7.10 iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description Processing maliciously crafted web content may lead to memory...

PT-2026-76833

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

PT-2026-76851

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.10 iPadOS versions prior to 18.7.10 iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description A memory corruption issue exists due to improper state management...

PT-2026-76842

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix race condition during PASID entry replacement CVE-2026-45945 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked...

PT-2026-76845

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100301 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset The kfdeventpageset function writes...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100514 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...