CVE-2026-95124

A Buffer Overflow vulnerability exists in madmurphy libconfini v.1.16.4 . A remote attacker can trigger a denial of service due to an allocation-size mismatch between the bundled load_ini_buffer utility and the strip_ini_cache() function. The vulnerability is categorized under CWE-120 (Classic Bu...

KLA91329 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Track can be exploited...

PT-2026-112330

Name of the Vulnerable Software and Affected Versions Microsoft Office LTSC 2021 versions prior to 16.0.14334.20974 Microsoft Office LTSC 2024 versions prior to 16.0.17932.21056 Microsoft 365 Apps for Enterprise affected versions not specified Description A heap-based buffer overflow in Microsoft...

PT-2026-112918

Name of the Vulnerable Software and Affected Versions Windows Failover Cluster affected versions not specified Description A use after free issue exists in Windows Failover Cluster, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use...

PT-2026-112576

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs...

PT-2026-111656

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions 25.1.1.1 through 25.1.1.1 Ivanti Connect Secure versions 25.1.2.2 through 25.1.2.2 Ivanti Connect Secure versions 22.8R2.4 through 22.8R2.4 Description An authentication bypass by spoofing allows a remote...

CVE-2026-95124: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache...

CVE-2026-95124

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache...

KLA91333 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

KLA91336 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

CVE-2026-104085: Improper Neutralization of Special Elements used in an OS Command

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...

PT-2026-111569

Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update config can inject an uppercase LOG FORMAT command localfile that the collector runs as root on...

PT-2026-112375

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

SUSE SLED15 / SLES15 Security Update : libsoup (SUSE-SU-2026:4631-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4631-1 advisory. - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak...

PT-2026-111209

In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...

PT-2026-111416

Name of the Vulnerable Software and Affected Versions gnome-remote-desktop affected versions not specified Description A flaw exists in the VNC TLS I/O handlers where retryable GnuTLS results, specifically GNUTLS E AGAIN and GNUTLS E INTERRUPTED, are processed using an unbounded busy loop rather...

PT-2026-111421

Name of the Vulnerable Software and Affected Versions gnome-remote-desktop affected versions not specified Description A flaw exists in the VNC TLS read path where partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of...

CVE-2026-109144: Uncontrolled Resource Consumption

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but...

CVE-2026-109786: Improper Output Neutralization for Logs

In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...

CVE-2026-109832: Loop with Unreachable Exit Condition

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...