167277 matches found
Oracle Linux 8 : dovecot (ELSA-2026-76763)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76763 advisory. - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 - fix CVE-2026-42007: heap use-after-free in...
RHEL 9 : openssh (RHSA-2026:76993)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76993 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...
RHEL 8 : python3.12 (RHSA-2026:77028)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77028 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
PT-2026-107754
This module provides a new UI experience for node editing using the Gutenberg Editor library. The module does not sufficiently check entity access in several editor endpoints. This vulnerability is mitigated by the fact that an attacker must have a role with the “use gutenberg” permission...
Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202
This module provides a new UI experience for node editing using the Gutenberg Editor library. The module does not sufficiently check entity access in several editor endpoints. This vulnerability is mitigated by the fact that an attacker must have a role with the “use gutenberg” permission...
Linux Distros Unpatched Vulnerability : CVE-2026-107167
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after- free condition during input-method state transitions...
RHEL 9 : kernel (RHSA-2026:77215)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77215 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: linux/dim: Fix divide by 0 in...
PT-2026-107507
llama.cpp before b11393 contains a use-after-free and double free vulnerability in common chat peg mapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling current tool pointer. Attackers can submit a chat parser in a POST /completion request emitting a tool-...
RHEL 9 : kernel-rt (RHSA-2026:77214)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77214 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...
xorg -- Multiple vulnerabilities
X.Org reports: Multiple issues have been found in the X server and Xwayland implementations published by X.Org for which we are releasing security fixes for in xorg-server-21.1.25 and xwayland-24.1.14. CVE-2026-88812: XKB SetGeometry TextDoodad Double Free CVE-2026-93515: Present Extension...
PT-2026-107503
In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit skb hint in tcp send synack When tcp send synack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcp rtx queue unlink and free and only...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability in the built-in Windows Management Instrumentation (WMI) of Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the built-in Windows Management Instrumentation WMI platform of Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-106190
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe...
CVE-2026-106193
Use after free in Parser in Google Chrome prior to 155.0.8059.39 allow...
CVE-2026-106211
Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 all...
CVE-2026-106233
Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allo...