p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 178

Vulnerabilities published for Operating systems in the last 30 days: 6855. Listed in the KEV catalogue: 4.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 160938

  1. CVE-2026-112275

    Medium · CVSS 6.9EPSS 0.13%No fix published

    Netpbm through 11.16.00 Heap Out-of-Bounds Write via rasttopnm pr_load_image

    Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory corruption and crashes.

    netpbm netpbm-free netpbm-free netpbm-free netpbm-free netpbm-free netpbm-free netpbm-free netpbm-free netpbm-free netpbm-freeOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-112274

    Medium · CVSS 6.3EPSS 0.52%No fix published

    libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init

    libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causing strlen to overrun the heap buffer and possibly crash.

    libtins libtins libtins libtins libtins libtins libtins libtins libtins libtinsOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2026-112273

    Medium · CVSS 6.9EPSS 0.56%No fix published

    libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name

    libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority records trigger a one-byte read when parsed, crashing applications on hardened allocators.

    libtins libtins libtins libtins libtins libtins libtins libtins libtins libtinsOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-111925

    Medium · CVSS 6.9EPSS 0.43%Fix available

    Mopidy before 4.0.5 Path Traversal via File Backend library.lookup

    Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/media_dirs because FileLibraryProvider.lookup() lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with file:// URIs to probe file existence, read tag metadata, and play out-of-sandbox files.

    mopidy mopidy mopidy mopidy mopidy mopidy mopidy mopidy mopidy mopidy mopidyOperating systems
    • Update to 4.0.5
    • Update to 4.0.5-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-8168

    High · CVSS 7.1EPSS 0.4%Fix available

    Denial-of-service vulnerability in the SVG parser and renderer impacts Qt

    Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.

    qt qt6-svg qt6-svg qt6-svg qtsvg-opensource-src qtsvg-opensource-src qtsvg-opensource-src qtsvg-opensource-src qtsvg-opensource-src qtsvg-opensource-src qt6-svg qtsvg-opensource-srcOperating systems
    • Update to 6.11.2
    • Update to 6.11.2-2
    • Update to 6.8.9
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. SUSE-SU-2026:4739-1

    Not ratedFix available

    Security update for libsoup2

    This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). - CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). - CVE-2026-66339:

    libsoup2 libsoup2 libsoup2 libsoup2 libsoup2 libsoup2 libsoup2 libsoup2 libsoup2 libsoup2 libsoup2Operating systems
    • Update to 2.74.3-150400.3.43.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. SUSE-SU-2026:4736-1

    Not ratedFix available

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.5 (MFSA 2026-110, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. - CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. - CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. - CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. - CVE-2026-109709: Information disclosure, pri

    mozillathunderbird mozillathunderbirdOperating systems
    • Update to 153.5.0-150400.13.9.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. SUSE-SU-2026:4735-1

    Not ratedFix available

    Security update for alsa

    This update for alsa fixes the following issues: - CVE-2026-96674: computation of combined topology element size using 32-bit arithmetic in `src/topology/ctl.c` allows for integer overflow that can cause sensitive data leak and application crashes (bsc#1282564). - CVE-2026-96675: failure to validate sparse binding indices before array access when processing ALSA configuration files can lead to an assertion failure and an application abort (bsc#1282563).

    alsaOperating systems
    • Update to 1.2.8-150500.3.6.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. SUSE-SU-2026:24402-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

    kernel-livepatch-sle16-rt_update_0Operating systems
    • Update to 18-160000.3.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. SUSE-SU-2026:24401-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

    kernel-livepatch-sle16-rt_update_1Operating systems
    • Update to 17-160000.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. SUSE-SU-2026:24400-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

    kernel-livepatch-sle16-rt_update_2Operating systems
    • Update to 15-160000.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. SUSE-SU-2026:24399-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

    kernel-livepatch-sle16-rt_update_3Operating systems
    • Update to 14-160000.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. SUSE-SU-2026:24398-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

    kernel-livepatch-sle16-rt_update_4Operating systems
    • Update to 14-160000.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. SUSE-SU-2026:24397-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

    kernel-livepatch-sle16-rt_update_5Operating systems
    • Update to 13-160000.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. SUSE-SU-2026:24357-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).

    kernel-livepatch-micro-6-0-rt_update_20Operating systems
    • Update to 9-1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. SUSE-SU-2026:24356-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).

    kernel-livepatch-micro-6-0-rt_update_22Operating systems
    • Update to 8-1.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. SUSE-SU-2026:24355-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).

    kernel-livepatch-micro-6-0-rt_update_23Operating systems
    • Update to 8-1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. SUSE-SU-2026:24313-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).

    kernel-livepatch-micro-6-0-rt_update_20Operating systems
    • Update to 9-1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →