The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported     to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion.
    The converted operators were written into a fixed size buffer with no check that they still fit, so a     glyph emitting many operators wrote past the end of the buffer. In fixed versions the remaining capacity     is tracked and the conversion stops when it is used up. (CVE-2026-63276)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-63276

medium Nessus Plugin ID 349163

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.1

Version 1.12 Oct 26, 2026, 2:57 PM CVSS metrics ("Cvssv4 threat score" set to 5.4) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") Plugin Feed: 202610261457
Version 1.11 Oct 23, 2026, 5:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610231756
Version 1.10 Oct 23, 2026, 11:36 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610231136
Version 1.9 Oct 22, 2026, 10:08 AM CVSS metrics ("Cvssv4 threat score" set to 5.4) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") Plugin Feed: 202610221008
Version 1.8 Oct 22, 2026, 12:02 AM CVSS metrics ("CVSSv3 score" set to 7.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H") CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.7 Oct 7, 2026, 3:19 PM CVSS metrics ("Cvssv4 threat score" set to 5.4) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") Plugin Feed: 202610071519
Version 1.6 Oct 6, 2026, 8:42 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610060842
Version 1.5 Sep 28, 2026, 8:04 AM CVSS metrics ("Cvssv4 threat score" set to 5.4) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") Plugin Feed: 202609280804
Version 1.4 Sep 25, 2026, 5:53 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609250553
Version 1.1 Sep 23, 2026, 1:21 PM New Plugin Feed: 202609231321