ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

Program Compatibility Assistant Service Privilege Escalation

The vulnerability of the Program Compatibility Assistant Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_86907)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686907 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143069)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143069 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142709 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142729)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142729 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink sndpcmdrain on a linked stream parks an on-stack...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142497)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142497 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data The OSS sequencer processes t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143084 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctpprocessasconf caches the...

Rocky Linux 8 [CIQ] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (crlsa-2026_85239)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685239 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verification bypa...

SUSE SLES15: openssh / openssh-askpass-gnome / openssh-clients / openssh-common / etc (SUSE-SU-2026:4811-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4811-1 advisory. - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after- free bsc1275074. -...

Rocky Linux 9 [CIQ] Security Update: php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_87151)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687151 advisory. php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and R...

Rocky Linux 10.2 [CIQ] Security Update: php8.4 / php8.4-bcmath / php8.4-bcmath-debuginfo / php8.4-cli / etc Multiple Vulnerabilities (crlsa-2026_87071)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687071 advisory. php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142767 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143094 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 vsock/virtio: stop...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142527)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142527 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores...

AlmaLinux 9 : librsvg2 (ALSA-2026:86921)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:86921 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block directly...

Oracle Linux 9 : librsvg2 (ELSA-2026-86921)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-86921 advisory. 2.50.7-3.1 - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities entities Tenable has extracted the preceding description block...

openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:22139-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22139-1 advisory. Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application Update...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142668 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-sl...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142548 advisory. In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdsfindbound looks up the...