Microsoft Windows: CVE-2026-83516: Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Out-of-bounds read in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

PT-2026-113269

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-85847: Windows Print Spooler Components Information Disclosure Vulnerability

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network...

PT-2026-113259

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

ALSA-2026:82280 Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

PT-2026-113444

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

PT-2026-112900

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An out-of-bounds read occurs in Windows BitLocker, which allows an authorized attacker to elevate privileges locally and affect the system. An out-of-bounds read is a condition wher...

CVE-2026-105460: Out-of-bounds Read

A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU Core Utilities vulnerabilities (USN-8697-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8697-1 advisory. It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield function. A local attacker could...

RHEL 8 : OpenEXR (RHSA-2026:82345)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:82345 advisory. OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. This...

MiracleLinux 9 : perl-DBI-1.643-9.el9_8.7 (AXSA:2026-2031:07)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2031:07 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description bloc...

Ubuntu 24.04 LTS / 26.04 LTS : libheif vulnerabilities (USN-8649-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8649-1 advisory. It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker coul...

CVE-2026-100130: Out-of-bounds Read

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : BlueZ vulnerabilities (USN-8908-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8908-1 advisory. Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Perl vulnerabilities (USN-8675-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8675-1 advisory. It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker...

Fortinet FortiManager Multiple Arbitrary File Read/Write via SQLi (FG-IR-26-178)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-178 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...

Microsoft Windows: CVE-2026-83719: Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-95114

The libwebsockets library contains an out-of-bounds read vulnerability within the Lightweight Embedded JSON Parser (LEJP) incremental parser located in lib/misc/lejp.c. A remote attacker can trigger this flaw by submitting specially crafted JSON data , leading to an invalid memory read that cause...

Ubuntu 26.04 LTS : openCryptoki vulnerabilities (USN-8707-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8707-1 advisory. It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use th...

Microsoft Windows: CVE-2026-97836: Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...