PT-2026-125204

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpecte...

python3.9 security update

3.9.25-7.0.1.el98.6 - Remove upstream URL reference 3.9.25-7.6 - CVE-2026-19553 python3.9: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio Resolves: RHEL-274143 3.9.25-7.5 - CVE-2026-19445 python3.9: Use-after-free of a server-side SSLContext wh...

Oracle Linux 9 : bind (ELSA-2026-89745)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-89745 advisory. - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-196...

CentOS Linux 6 [TuxCare] Security Update: kernel / kernel-abi-whitelists / kernel-debug / kernel-debug-devel / etc (CENTOS6:CLSA-2026:1792759879)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1792759879 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport reference in qla24xxreportidacquisition In the...

Ozone Component DoS

The vulnerability in the Ozone component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory allocation. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

AlmaLinux 8 : firefox (ALSA-2026:76850)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:76850 advisory. firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free i...

Google Chrome Microsoft Edge DoS

The vulnerability in the Receiver component of Google Chrome and Microsoft Edge is related to use-after-free memory usage. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

AlmaLinux 10 : firefox (ALSA-2026:76764)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:76764 advisory. firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free ...

PT-2026-125206

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected...

ALSA-2026:89757 Important: firefox security, bug fix, and enhancement update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: thunderbird: Privilege escalation in the Application Update component CVE-2026-109704 firefox:...

Linux Distros Unpatched Vulnerability : CVE-2026-98896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that may run after the domain has been removed by...

PT-2026-123382

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vc4 component where the hangcheck timer and job done work are not properly stopped during teardown. Specifically, vc4 irq disable only cancels overflow mem wor...

PT-2026-125334

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

Apple Safari resource management error vulnerability

A resource management error vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple tvOS versions prior to 27.2, Apple visionOS versions prior to...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from a use-after-free issue, which may lead to unintended system termination or corruption of...

Apple Safari security vulnerabilities

A security vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from a use-after-free issue; processin...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792979607)

"The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792979607 advisory. - In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant...

Apple Security Advisory 10-26-2026-8

Apple Security Advisory 10-26-2026-8 - watchOS 27.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, and information disclosure vulnerabilities...

RHEL 8 : xorg-x11-server (RHSA-2026:89747)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89747 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

PT-2026-125455

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...