CVE-2026-76021: Use After Free

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-17124: Out-of-bounds Read

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read...

CVE-2026-16936: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-18263: Exposed Dangerous Method or Function

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-18262: Exposed Dangerous Method or Function

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-13121: Exposed Dangerous Method or Function

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-18280: Buffer Copy without Checking Size of Input

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

CVE-2026-18273: Incorrect Default Permissions

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

CVE-2026-16951: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-14946: Unrestricted Upload of File with Dangerous Type

A high privileged remote attacker can upload a .php file and then request it directly from /uploads/ .php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise...

PT-2026-79225

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

PostgreSQL Regular Expression Code Execution

The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PostgreSQL refint module Code Execution

The vulnerability of the refint module in the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PostgreSQL Code Execution

The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PostgreSQL EXTRACT Code Execution

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

PostgreSQL tsvector tsquery Code Execution

The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PostgreSQL Code Execution

The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PostgreSQL PL/Tcl PL/Perl Code Execution

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PostgreSQL pg_restore_attribute_stats() Code Execution

The vulnerability of the pgrestoreattributestats function in the PostgreSQL database management system is related to type mixing errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...