Linux Distros Unpatched Vulnerability : CVE-2026-106064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computin...

CentOS Linux 8.4 [TuxCare] Security Update: gd / gd-devel / gd-progs (CENTOS8.4:CLSA-2026:1791373384)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791373384 advisory. - libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 Note that Nessus has not tested for this issue but has...

ALSA-2026:77690 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel: vsock/virtio: fix zerocopy completion for...

PT-2026-107530

A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer size. The plug-in allocates a buffer based on the wrapped value while GEGL writes using the true image extent, rooted ...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2026:77371)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:77371 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

PT-2026-107421

A critical buffer overflow CVE-2026-15340 affects Savannah lwIP SMTP client v2.2.1, risking remote code execution. CISA urges immediate patching to protect embedded systems and critical infrastructure. lwIP CISAAlert BufferOverflow SOCMinute https://t.co/xcpXVKmfAg...

AlmaLinux 10 : freerdp (ALSA-2026:75570)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75570 advisory. FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU CVE-2026-85089 FreeRDP: FreeRDP: Denial o...

The vulnerability of the Graphics Component component in the Microsoft Office software suite allows a hacker to execute arbitrary code.

The vulnerability of the Graphics Component component in the Microsoft Office software suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2026-107438

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In sol pdu decrypt, out is allocated as NET BUF SIMPLE17 and then filled with net buf...

PT-2026-107389

Name of the Vulnerable Software and Affected Versions wolfSSL wolfSSH versions 1.4.11 through 1.5.0 Description An unsigned integer underflow occurs in the wstrncat function within src/port.c on non-Windows platforms. This issue allows an authenticated remote attacker to write a single null byte...

PT-2026-107382

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

PT-2026-107647

Name of the Vulnerable Software and Affected Versions Excelize versions 2.8.1 through 2.11.0 Description In the Excelize Go library, the ANCHORARRAY function recursively calls the exported CalcCellValue function. This process creates a new calculation context at each cycle, which bypasses iterati...

PT-2026-107655

Name of the Vulnerable Software and Affected Versions github.com/xuri/excelize/v2 versions 2.0.0 through 2.11.0 github.com/xuri/excelize versions 1.1.0 through 1.4.1 Description An issue exists where the ColumnNameToNumber function accumulates a bijective base-26 value in an int64 without detecti...

CVE-2026-105837

libmikmod before 3.3.14 contains an integer overflow vulnerability in...

CVE-2026-106063

A heap-based buffer overflow was found in GIMP\u2019s DICOM export plu...

The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Remote Desktop Client for Windows client involves an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Remote Desktop Client for Windows client involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-105839

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer...

Debian: CVE-2026-42616: ntfs-3g -- security update

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

Debian: CVE-2026-46572: ntfs-3g -- security update

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcuttail in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory...