PT-2026-88010

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally. Null termination is a method used in programming to mark the...

CVE-2026-70587: Improper Null Termination

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...

PT-2026-87821

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Protocol affected versions not specified Description Improper null termination in the Windows Remote Desktop Protocol allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At t...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

SUSE CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

CVE-2026-74603

A flaw was found in the Linux kernel's ptp: ocp module. This vulnerability occurs because the EEPROM board ID, a fixed-size field, is not guaranteed to be null-terminated. When this ID is processed as a C string, it may lead to an over-read beyond its intended memory boundary. This memory...

CVE-2026-72241

A flaw was found in the kernel. In the leds: uleds module, a buffer overread can occur because the name string provided by userspace is not guaranteed to be null-terminated. This can lead to a local attacker potentially reading sensitive information from adjacent memory or causing a denial of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100523 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099697 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length,...

CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

UBUNTU-CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

CVE-2026-72241

CVE-2026-72241 affects the Linux kernel’s leds: uleds path. The vulnerability arises because a user-supplied name string used by the LED class device may not be null-terminated, and using strchr() can lead to a buffer overread. The fix replaces strchr() with a safe variant (strnchr()) and adds an...

CVE-2026-72241 leds: uleds: Fix potential buffer overread

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

PT-2026-72429

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overread can occur in the uleds component of the leds subsystem. This happens because the name string provided by userspace is not guaranteed to be null-terminated. When the...

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2026-3070)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Null Termination (CVE-2026-43028)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505568; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

SUSE CVE-2026-64412

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to requestmodule...

AZL-93527 CVE-2026-64412 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to requestmodule...