Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142495 advisory. In the Linux kernel, the following vulnerability has been resolved: rhashtable: clear stale iter-p on table restart rhashtablewalkstartcheck has two restart paths wh...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143088 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142718 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then...

RHEL 9 : php:8.2 (RHSA-2026:87072)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87072 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142531 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummyhcd: prevent fiforeq reuse during giveback dummyhcd embeds a single shared...

PT-2026-135067

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from wire parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...

PT-2026-134800

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=575915982 Crash type: Use-of-uninitialized-value Crash state: nlohmann::json abi v3 12 0::detail::binary readernlohmann::json abi v3 12 0::ba nlohmann::json abi v3 12 0::detail::binary readernlohmann::json abi v3 12 0::ba...

PHP 8.5.5 JSON Encoding Use-After-Free

PHP versions 8.4.x and 8.5.x contain a use-after-free in jsonencode when a nested JsonSerializable callback resizes the encoded object's property table. A proof of concept is included. https://packetstorm.news/download/237054...

PHP 8.5.11 Stale Worker Global State Use-After-Free

PHP version 8.5.11 contains a stale worker-global state use-after-free vulnerability. This proof of concept exercises the fatal-backtrace producer and pre-initialization diagnostic consumer in a local lab. https://packetstorm.news/download/237035...

Unbound 1.26.1 Multiple Vulnerabilities

Unbound versions through 1.26.1 contain a DNS-over-QUIC use-after-free, two DNSSEC trust-island bypasses, an aggregate decompression-work issue, and a cache side channel. Version 1.26.2 fixes these issues...

ROS-20261022-73-0107

The vulnerability of the xmtresolveroutes function in the MP4Box multimedia platform of GPAC, related to the use of memory after its release during processing an incorrect XMT scenario, allows a malicious actor to trigger a Denial-of-Service Attack DoS...

ROS-20261022-73-0109

The vulnerability of the xmtnodestart function in the MP4Box utility of the GPAC multimedia platform, related to the use of memory after its release during processing an incorrect XMT scene, allows a perpetrator to trigger a Denial-of-Service Attack DoS...

ROS-20261022-73-0015

The vulnerability in freerdp3 is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-121423

Name of the Vulnerable Software and Affected Versions dnspython versions prior to 2.9.0 Description The dns.name.from wire parser function fails to implement a hop limit when following DNS compression pointer chains. An attacker can send a specially crafted DNS wire-format message that triggers...

ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

Delivery Optimization Service Privilege Escalation

The vulnerability of the Delivery Optimization service for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Storage Privilege Escalation

The vulnerability of Windows operating system storage devices is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

vvdecapp Decoder Heap Use-After-Free

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

Certificates module Privilege Escalation

The vulnerability of the Certificates module in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

PHP 8.5.11 Session Upload Progress Use-After-Free

PHP version 8.5.11 session.uploadprogress handling contains a cross-request use-after-free caused by stale decoder state. The included proof of concept builds a local PHP server and triggers a worker crash with two local multipart requests. https://packetstorm.news/download/237068...