Important: jackson-core

Issue Overview: The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of...

FreeBSD : PostgreSQL -- Multiple vulnerabilities (05d311bc-9991-11f1-bc50-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 05d311bc-9991-11f1-bc50-6cc21735f730 advisory. The PostgreSQL project reports: CVE-2026-6464: psql COPY FROM STDIN, if the copy fails before...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100571 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree for replaced sysctl write buffer procsyscallhandler allocates its temporary sysct...

macOS 26.x < 26.6.2 Multiple Vulnerabilities (148281)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6.2. It is, therefore, affected by multiple vulnerabilities: - An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100144 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: do not reuse an in-progress partial send espintcp keeps a single in-flight transm...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100096 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssauth kref leak in gssallocmsg error path Commit 5940d1cf9f42 SUNRPC: Rebalance a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100723)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100723 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: use kmaplocalpage in netvsccopytosendbuf netvsccopytosendbuf copies page buffer entrie...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100555)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100555 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in sctprcvasconflookup sctprcvasconflookup in net/sctp/input.c only check...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099748 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftexthdr: fix register tracking for FPRESENT flag nftexthdrinit passes user-controlle...

PT-2026-73271

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

RHEL 10 : bind (RHSA-2026:55437)

"The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55437 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

PT-2026-76833

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

PT-2026-76823

Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk::assemble in src/lib/deskflow/ClipboardChunk.cpp, causing the server path in src/lib/server/ClientProxy1 6.cpp or client path i...

PT-2026-76645

Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099958 advisory. In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrppduparsevecattr In mrppduparsevecattr, vector...

PT-2026-76845

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

PT-2026-76842

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

The vulnerability of the apparmor component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `drivers/media/i2c/tw9903.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/media/i2c/tw9903.c component of the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the gfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the gfs2 component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...