PT-2026-71477

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 17.0 through 17.10 PostgreSQL versions 18.0 through 18.4 Description Improper enforcement of message integrity in GSSAPI support allows a user to negotiate GSSAPI in a manner that contradicts pg hba.conf rules during an...

PT-2026-70947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An uninitialized memory read exists in the handle get version reply function. The issue occurs because the function uses msg-front alloc len as the decode boundary for MON GET VERSION...

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

DEBIAN-CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

CVE-2026-68279

A flaw was found in the Linux kernel's DisplayPort DP Multi-Stream Transport MST subsystem. A malicious or misbehaving MST hub could send a specially crafted sideband message that causes an out-of-bounds read in the drmdpsidebandparseremotedpcdread and drmdpsidebandparseremotei2creadack functions...

org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...

jboss-remoting: jboss-remoting: integer overflow in MessageReader leads to pre-authentication denial of service

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...

CVE-2026-62717

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

CVE-2026-62719

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

CVE-2026-65790 Windows Message Queuing Elevation of Privilege Vulnerability

...

EUVD-2026-56737

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

CVE-2026-62717

Summary: CVE-2026-62717 is a heap-based buffer overflow in Windows Message Queuing that could allow an authorized local attacker to elevate privileges. This is supported by multiple sources (NVD entry and CVE records). Affected component: Windows Message Queuing. Vulnerability type & root cause: ...

EUVD-2026-56637

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

CVE-2026-62717 Windows Message Queuing Elevation of Privilege Vulnerability

...

CVE-2026-62719

CVE-2026-62719 describes a heap-based buffer overflow in Windows Message Queuing that allows an authorized, locally-authenticated attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with Local attack vector, Low attack complexity, and privileges required. The impact is Conf and Inte...

CVE-2026-62719 Windows Message Queuing Elevation of Privilege Vulnerability

...

EUVD-2026-56357

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...