Astra Linux – Vulnerability in golang-golang-x-text

In Go 1.15.4, a "index out of range" panic occurs in the language.ParseAcceptLanguage function during the parsing of the -u- extension. The language.ParseAcceptLanguage function is supposed to be able to parse an HTTP Accept-Language header...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick, specifically in the code file coders/bmp.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned int. This likely leads to a disruption in the...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. Some SMB1 write requests were not properly range-checked to ensure that the client had sent enough data to complete the write operation. As a result, the contents of the server’s memory were written to the file or printer, rather than the data provided by the clien...

Astra Linux – Vulnerability in Subversion

Subversion’s moddavsvn is vulnerable to memory corruption. When checking path-based authorization rules, moddavsvn servers may attempt to use memory that has already been freed. Affected Subversion moddavsvn servers include versions 1.10.0 through 1.14.1 including those versions. Servers that do...

Astra Linux – Vulnerability in Vim

Use of out-of-range pointer offset in the GitHub repository vim/vim before version 9.0.1499...

postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats()

A flaw was found in PostgreSQL. An object creator can exploit a type confusion vulnerability in the pgrestoreattributestats function. This flaw occurs due to the conflation of range and multirange values, allowing the attacker to execute arbitrary code as the operating system user running the...

kernel: wifi: cfg80211: validate PMSR FTM preamble range

A flaw was found in the cfg80211 component of the Linux kernel's Wi-Fi subsystem. This vulnerability allows the PMSR FTM request parser to accept preamble values outside the defined nl80211 range. An attacker could exploit this by providing malformed input, potentially leading to unexpected syste...

CVE-2026-86885: Improper Input Validation

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

PT-2026-91686

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 Description An input validation issue exists where an attacker within radio range can cause unexpected system termination. Recommendations Update iOS to version 27. Update iPadOS to version ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000585 advisory. Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux...

SUSE CVE-2026-89666

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops A client can send an NFSv3 SETATTR, CREATE, MKDIR, SYMLINK or MKNOD carrying an atime or mtime whose nseconds field is out of range. The value is well-formed on t...

CVE-2026-89727

A flaw was found in the Kernel-based Virtual Machine KVM for ARM64 arm64 architecture. A malicious guest operating system can provide an interrupt ID INTID that is outside the expected range to the GICv2 Generic Interrupt Controller version 2 during interrupt deactivation. This can trigger a...

CVE-2026-89640

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. When performing a file range remapping operation with a zero length, an integer underflow can occur if the offset exceeds the file size. This can lead to corruption of the byte count in file system control...

Linux Distros Unpatched Vulnerability : CVE-2026-89727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: GICv2: Don't WARN on out-of-range GICVDIR INTID vgicv2deactivate passes the INTID a guest wrote to GICVDIR straight to vgicgetvcpuirq, and treats a...

Linux Distros Unpatched Vulnerability : CVE-2026-89721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: rockchip-samsung-dcphy: fix out-of-range maxregister The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at...

Linux Distros Unpatched Vulnerability : CVE-2026-89701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: validate nseconds in TIMEDELEG decode paths The xdrgen-based TIMEDELEGACCESS and TIMEDELEGMODIFY decode arms store a raw uint32t nseconds directly into...

Linux Distros Unpatched Vulnerability : CVE-2026-89640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: fix lofft underflow in cifsremapfilerange when len == 0 With len == 0 clone to EOF, the effective length is computed as: len = srcinode-isize - off; If of...

CVE-2026-56390 affecting package bison for versions less than 3.8.2-2

CVE-2026-56390 affecting package bison for versions less than 3.8.2-2. A patched version of the package is available...

CVE-2026-63074 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63074 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-89665

A flaw was found in the Linux kernel's nfsd component. A remote attacker could exploit this vulnerability by sending a specially crafted NFSv2 SETATTR or CREATE request with an out-of-range 'useconds' value. This could lead to incorrect timestamps being written to the filesystem, resulting in dat...