APSB26-132 : Security update available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves a critical vulnerability that could result in arbitrary code execution...

Fedora 44 : chirp (2026-20feeb23e0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-20feeb23e0 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...

Adobe Illustrator < 29.8.11 / 30.0 < 30.8 Multiple Arbitrary code execution (APSB26-131)

The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.11, 30.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-131 advisory. - Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code...

ALSA-2026:64812 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...

CVE-2026-12648: Deserialization of Untrusted Data

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...

ROS-20260908-73-0034

The vulnerability in Golang-X-Net is related to incorrect checking of the unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

CVE-2026-81983: Out-of-bounds Write

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-79907: Double Free

Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-79574

The mpush gateway server (version v0.8.1 ) is vulnerable to arbitrary code execution due to an issue where an attacker can send a crafted broadcast message . This vulnerability allows for unauthorized command execution on the target server. While the documents confirm the existence of a proof of ...

CVE-2026-81980: Out-of-bounds Write

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-80161: Access of Resource Using Incompatible Type

Acrobat Reader is affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires...

CVE-2026-33197: Incomplete List of Disallowed Inputs

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability...

CVE-2026-82006: Heap-based Buffer Overflow

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75992: Out-of-bounds Write

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75771: Integer Overflow or Wraparound

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75990: Incorrect Authorization

Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must...

CVE-2026-81987: Integer Overflow or Wraparound

Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-49881: Protection Mechanism Failure

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-81975: Use After Free

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...