Threat database

This security advisory addresses two stack-based buffer overflow vulnerabilities in libsoup used by the spice-client-win MSI installers for Windows clients. The first vulnerability (CVE-2026-0719) involves a signed to unsigned conversion error in libsoup NTLM authentication. The second vulnerability (CVE-2026-1761) involves a stack-based buffer overflow in libsoup multipart response parsing. These issues affect Red Hat Enterprise Linux 8.4 Extended Update Support and Advanced Update Support versions. Red Hat has released updated spice-client-win packages to fix these vulnerabilities.