747359 matches found
Oracle Linux 10 : ELSA-2026-64810-0: / expat (ELSA-2026-648100)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648100 advisory. - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Fix CVE-2026-50219: forbid XMLParserFree/Reset from handlers - expat:...
CVE-2026-79379
CVE-2026-79379 is a buffer overflow in the SBC_DecodeFrames() function of the Bestechnic BES2300 Bluetooth Audio SoC firmware. Affected versions are v3.x and earlier ; the issue is fixed in v5.0 . An attacker on the adjacent network can send a crafted frame to trigger the overflow, resulting in a...
PT-2026-88702
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
PT-2026-88750
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88047
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
UBUNTU-CVE-2026-69304
Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...
ALSA-2026:64784 Critical: 389-ds-base security, bug fix, and enhancement update
389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length...
cjose -- Heap-based Buffer Overflow
https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj reports: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms alg = A128KW, A192KW,...
Security update for freeciv (important)
openSUSE security update: security update for freeciv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21800-1 Rating: important References: bsc1278695 bsc1278696 Affected Products: openSUSE Leap 16.0...
KLA91266 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...
PT-2026-87167
An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router port and has not authenticated can supply connection-monitoring parameters that cause the server to expend CPU resources...
The vulnerability in the `lib/rhashtable.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the lib/rhashtable.c component of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...
NewStart CGSL MAIN 7.02 : bind Multiple Vulnerabilities (NS-SA-2026-0110)
The remote NewStart CGSL host, running version MAIN 7.02, has bind packages installed that are affected by multiple vulnerabilities: - Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions...
RHEL 9 : ignition (RHSA-2026:65336)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65336 advisory. Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing fil...
PT-2026-88692
Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...
KLA91265 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...
PT-2026-87259
🛡️ SQL Server’s latest flaw won’t steal headlines—just potentially sensitive data. Patch CVE-2026-68781 carefully: CU and GDR fixes aren’t interchangeable, because even patches need compatibility checks. https://t.co/dhlxOYJPxF MicrosoftSecurity Msrc Cve202668781 https://t.co/XChTqF3OGv...
CVE-2026-52486
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
PT-2026-88490
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...