CentOS Linux 7 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1783690752)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1783690752 advisory. - A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loadin...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785839724)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785839724 advisory. - The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an...

TencentOS Server 4: tomcat (TSSA-2026:1064)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1064 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Off-by-one Error

org.apache.tomcat, tomcat-catalina is vulnerable to an Off-by-one Error. The vulnerability is due to rewrite processing restarting at the second rule instead of the first, which allows an attacker to potentially bypass intended rewrite rules or cause unintended request processing...

CVE-2026-101014

A flaw was found in OpenDMARC. An off-by-one boundary error exists in the DMARC Domain-based Message Authentication, Reporting, and Conformance record parser during cleanup operations in the opendmarcutilcleanup function. A remote attacker could exploit this vulnerability by submitting specially...

librenswan: IKEv2 Denial of Service via malformed fragmentation

A flaw was found in Libreswan's IKEv2 fragment reassembly mechanism. When a VPN gateway processes incoming split network packets fragments containing unexpected data, an off-by-one boundary validation error triggers an internal program safety check assertion failure. A remote, unauthenticated...

PT-2026-99806

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A remote attack can be initiated against the DMARC Record Parser component. The issue resides in the opendmarc util cleanup function within the libopendmarc/opendmarc util.c library, where a...

PT-2026-99730

Name of the Vulnerable Software and Affected Versions OpenDKIM versions prior to 2.11.1 Description A remote off-by-one error exists in the Decoder component within the dkim qp decode function of the util.c file. An off-by-one error occurs when a program writes one byte past the end of the buffer...

CVE-2026-79148

A flaw was found in DevTools in Google Chrome. An off-by-one error exists that a remote attacker could exploit by leveraging social engineering to persuade a user to install a malicious Chrome extension. This vulnerability could potentially allow the attacker to read sensitive memory within the...

Astra Linux – Vulnerability in Chromium

A “off-by-one” error in DevTools in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox through a crafted Chrome extension, using social engineering techniques. Chromium security severity: Low...

K000163397: GnuTLS vulnerability CVE-2026-42015

Security Advisory Description A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory...

[SECURITY] [DLA 4791-1] memcached security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4791-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 23, 2026 https://wiki.debian.org/LTS -...

Debian dla-4791 : memcached - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4791 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4791-1 [email protected]...

CVE-2026-18460

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2026-18460 Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2026-18460

An off-by-one error leading to an out-of-bounds write vulnerability exists in the RTI Connext Professional (Core Libraries) . This flaw allows for overflow buffers and affects versions 7.4.0 before 7.7.0.1 and 7.0.0 before 7.3.1.6 . No specific exploitation details or remediation steps are provid...

EUVD-2026-84615

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2026-18460 Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2026-18460: Off-by-one Error

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

PT-2026-96890

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 7.0.0 through 7.3.1.5 RTI Connext Professional versions 7.4.0 through 7.7.0 Description An off-by-one error in the Core Libraries leads to an out-of-bounds write, which allows buffer overflows. An off-by-one...