CLSA-2026-1792078022 ghostscript: Fix of 6 CVEs

CVE-2023-28879: fix buffer overrun in TBCP encoding - CVE-2023-38559: fix out-of-bounds read in devnpcxwriterle - CVE-2023-46751: fix dangling file pointer in gdevprnopenprinterseekable - CVE-2024-46951: check the type of the Pattern Implementation - CVE-2024-46953: check for overflow validating...

CLSA-2026-1792077881 ghostscript: Fix of 6 CVEs

CVE-2023-28879: fix buffer overrun in TBCP encoding - CVE-2023-38559: fix out-of-bounds read in devnpcxwriterle - CVE-2023-46751: fix dangling file pointer in gdevprnopenprinterseekable - CVE-2024-46951: check the type of the Pattern Implementation - CVE-2024-46953: check for overflow validating...

SUSE CVE-2026-98404

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERRPTR bug in virtiogpuuserframebuffercreate Smatch complains that returning a NULL here will lead to a NULL pointer dereference in drmmodeaddfb2. Return an error pointer instead...

SUSE CVE-2026-98411

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseqdeviceregister If devsetname fails in pwrseqdeviceregister, we jump to the errputpwrseq label before initializing pwrseq-targets. pwrseqrelease will try to iterate over...

SUSE CVE-2026-98412

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrsequnitnew If memory allocation fails in pwrsequnitsetupdeps, pwrsequnitput is called to release the partially initialized unit. However, we've never initialized unit-list and...

SUSE CVE-2026-101341

Tokens of text in RDATA of for example TXT records under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which ar...

SUSE CVE-2026-109252

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERBRPCINTERNALNAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the Names...

CLSA-2026-1792072796 cups: Fix of 2 CVEs

CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs...

Microsoft Office Word Information Disclosure Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

SUSE CVE-2026-109964

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

CLSA-2026-1792072476 cups: Fix of 2 CVEs

CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs...

CLSA-2026-1792071609 cups: Fix of 2 CVEs

CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs...

CVE-2026-79836

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

CVE-2026-79836

The HPE NonStop SQL/MX Run-Time Statistics component is vulnerable to memory corruption and a null pointer dereference. This flaw may allow an attacker to cause a process crash , Denial of Service (DoS) , or information disclosure . Affected versions include SQL/MX Run-Time Statistics T1117 - T11...

CVE-2026-79836 HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

EUVD-2026-102021

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

CVE-2026-79836 HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

CVE-2026-98404

A flaw was found in the Linux kernel's VirtIO GPU driver. A local user could exploit this flaw to cause a Denial of Service DoS by triggering a system crash. When user framebuffer creation encounters an error, the driver improperly returns a null value instead of an error code, resulting in a nul...

firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to invalid pointer in the Graphics component...

CVE-2026-24723

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...