NotepadPlusPlus: CVE-2026-85279: Stack-based Buffer Overflow

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/src/MISC/PluginsManager/PluginsManager.cpp because the plugin-supplied GetLexerCount result controls a loop that writes to...

PT-2026-97009

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler affected versions not specified Description A Stack-based Buffer Overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

CVE-2026-63276: Out-of-bounds Write

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

Adobe Substance 3D Modeler 1.0.0 < 1.22.8 Multiple Arbitrary code execution (APSB26-155)

The version of Adobe Substance 3D Modeler installed on the remote host is prior to 1.22.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-155 advisory. - Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary co...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090058 advisory. In Apache HTTP Server 2.4.32-2.4.39, when modremoteip was configured to use a trusted intermediary proxy server using the PROXY protocol, a specially crafted PROXY...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glusterfs (UTSA-2023-001153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001153 advisory. In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. Tenable has extracted the preceding description bloc...

PT-2026-96704

Name of the Vulnerable Software and Affected Versions LibreOffice affected versions not specified Description An issue exists when reading CFF Compact Font Format fonts that may be embedded in documents. A stack buffer overflow occurs during the processing of glyph hints because the number of hin...

PT-2026-105968

stack graphs::c is a public module. From 0.0.3 through the current crates.io release 0.14.1, its pointer-taking entry points are pub extern "C" fn rather than unsafe fn. Safe Rust can call them. sg stack graph free frees the pointer with Box::from raw. sg stack graph freestd::ptr::null mut is...

PT-2026-104834

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid AT SECURE programs. When such a program's DT RPATH or DT RUNPATH begins with $ORIGIN and is followed by NUL or '/...

ALSA-2026:69876 Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

CVE-2026-63275: Out-of-bounds Write

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint...

PT-2026-105225

Security vulnerability affects the argo-cd package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

Intel® PROSet/Wireless WiFi Software Advisory-01468

Summary: Potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software may allow escalation of privileges, information disclosure or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-24911...

Linux Distros Unpatched Vulnerability : CVE-2026-93433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System...

PT-2026-96705

Name of the Vulnerable Software and Affected Versions LibreOffice affected versions not specified Description A stack buffer overflow occurs during the conversion of CFF fonts to Type 1 fonts, a process that takes place when a document is exported to PDF and CFF fonts are embedded. The issue aris...

RHEL 9 : postgresql (RHSA-2026:69607)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69607 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

RockyLinux 9 : postgresql:18 (RLSA-2026:67848)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67848 advisory. postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary...

RHEL 10 : postgresql16 (RHSA-2026:70186)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70186 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that...

NotepadPlusPlus: CVE-2026-86054: Stack-based Buffer Overflow

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEditor/src/Parameters.cpp because it copies a session path derived from -settingsDir= into backupPathNameMAXPATH with unbounded wcscpy and...

PT-2026-96905

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 7.4.0 through 7.7.0 RTI Connext Professional versions 7.0.0 through 7.3.1.5 RTI Connext Professional versions 6.1.0 through 6.1.x RTI Connext Professional versions 6.0.0 through 6.0.x RTI Connext Professional...