PT-2026-117971

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

Google Chrome Vulnerability: CVE-2026-113300

Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-118607

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

kernel security, bug fix, and enhancement update

5.14.0-687.59.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

PT-2026-120142

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description An unauthenticated user can perform an arbitrary write into the shared Redis instance under any tenant's key. This issue breaks the credential-encryption boundary of the platform,...

PT-2026-118370

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX MEDIA driver callback, giving control of the instruction...

PT-2026-118645

Name of the Vulnerable Software and Affected Versions PEAK-System PCAN affected versions not specified Description The driver contains a flaw involving a variable-length receive-record copy. The issue occurs because the driver utilizes a requested or queued record count without properly limiting...

PT-2026-118477

HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font glyph to string import has a wrong WAMR signature. Attackers can supply a crafted font whose wasm module places the output buffer near linear memory's end, writing...

PT-2026-118435

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NX CRYPTO MAX RSA MODULUS SIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a...

PT-2026-118340

DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText that passes draft file contents to unserialize without restricting allowed classes. Authenticated users with edit rights can race concurrent draft rewrites to splice serialized data, instantiating...

PT-2026-118412

gx binres pixelmap table load in the GUIX binary resource theme loader indexes the pixelmap table with a value read verbatim from the resource file and never bounds it against the table size. A crafted theme drives a write of up to roughly 256 KB past the end of the table. The overflowed buffer i...

PT-2026-118473

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID: CVE-2026-113613 Vendor: Unknown Severity: Critical — CVSS 9.2 Product: Unknown Date: 2026-10-20 A critical vulnerability Path Traversal has been disclosed affecting Unknown. Patch immediately...

PT-2026-118603

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-117961

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected...

HMS Networks PEAK-System Device Driver Setup buffer error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain a buffer error vulnerability. This vulnerability arises when the parser processes malformed records; after a record is deemed invalid, the...

PT-2026-118375

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M25 through 11.0.26 Description A buffer under-read occurs in the HTTP/1.1 non-blocking write path. This issue allows a large response body to be split between the current request and the subsequent request receiv...

Linux Distros Unpatched Vulnerability : CVE-2026-98867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: bound the logical key offset from persistent memory cachekeydecode takes a key's logical off from the cache device and later indexes...

Linux Distros Unpatched Vulnerability : CVE-2026-98673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort befo...

PT-2026-118595

Name of the Vulnerable Software and Affected Versions Acrobat for Edge versions prior to 154.0.4258.48 Description An out-of-bounds write issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user...

RockyLinux 9 : postgresql:16 (RLSA-2026:85791)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85791 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding description...