PT-2026-73347

Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...

PT-2026-76692

Name of the Vulnerable Software and Affected Versions New API versions prior to 1.0.0-rc.18 Description An issue exists where user-controlled quantity parameters can cause overflow conversions during quota calculations in common/quota math.go and related settlement paths. A low-privileged account...

The vulnerability of the USB-Audio module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the USB-Audio module in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `rockchip_vpu981_av1_dec_init()` function in the driver/media/platform/verisilicon/rockchip_vpu981_hw_av1_dec.c file of the Linux operating system’s multimedia device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rockchipvpu981av1decinit function in the driver/media/platform/verisilicon/rockchipvpu981hwav1dec.c file of the Linux operating system’s multimedia device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the do_trap_ecall_u() function in the arch/riscv/kernel/traps.c module of the module management subsystem for the RISCV-architecture Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dotrapecallu function in the arch/riscv/kernel/traps.c module of the Linux operating system’s RISCV architecture-based device driver management subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099509)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099509 advisory. Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds...

RHEL 8 : 389-ds:1.4 (RHSA-2026:55757)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55757 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Linux Distros Unpatched Vulnerability : CVE-2026-19969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099743 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenetputtxcb The writeptr points to the next open txcb. We wa...

OPENSUSE-SU-2026:11531-1 htop-3.5.3-1.1 on GA media

These are all security issues fixed in the htop-3.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100097 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100091 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: don't use simplestrtoul Replace unsafe port parsing in epaddrlen,...

RHEL 10 : 389-ds-base (RHSA-2026:55424)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55424 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDA...

PT-2026-73186

A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes 3DGS MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation lea...

CVE-2026-67967

CVE-2026-67967 is a buffer overflow (CWE-121) and command injection (CWE-78) in the /goform/module API of Tenda W20E V5.0 firmware V16.01.0.6(2782). The vendor's prior fix (CVE-2025-44867, CVE-2026-36819) left sibling handlers vulnerable: setFixTools.hostName filters only ;, &, | before popen()-e...

About the security content of macOS Tahoe 26.6.2

About the security content of macOS Tahoe 26.6.2 This update delivers security fixes that were first made available in the macOS Golden Gate 27 beta. This document describes the security content of macOS Tahoe 26.6.2. About Apple security updates For our customers' protection, Apple doesn't...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-022351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022351 advisory. GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect...

RHEL 9 : 389-ds-base (RHSA-2026:55426)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55426 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

ALSA-2026:55530 Important: 389-ds:1.4 security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status...

RHEL 9 : 389-ds-base (RHSA-2026:55421)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55421 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...