https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:04:08.464911+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-40468 CVE-2026-40468 — Heap buffer overflow in gawk 2026-10-03T22:04:08.486431+00:00

Affected: GNU gawk

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.

 https://cve.radiocsirt.org/vuln/usn-8588-1 USN-8588-1 — gawk vulnerabilities 2026-10-03T22:04:08.486495+00:00

Affected: Ubuntu:Pro:14.04:LTS: gawk, Ubuntu:Pro:16.04:LTS: gawk, Ubuntu:Pro:18.04:LTS: gawk, Ubuntu:Pro:20.04:LTS: gawk, Ubuntu:22.04:LTS: gawk, Ubuntu:24.04:LTS: gawk, Ubuntu:26.04:LTS: gawk

It was discovered that Gawk incorrectly handled memory when processing input using the getline redirection. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-40467)

It was discovered that Gawk incorrectly handled certain integer calculations when allocating memory. An attacker could possibly use this issue to cause a denial of service or overwrite heap memory with attacker-controlled data. (CVE-2026-40468)

It was discovered that Gawk incorrectly handled certain integer calculations when performing substitutions. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-40469)

It was discovered that Gawk incorrectly handled memory when reading directory entries. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-40553)