168107 matches found
ROS-20261013-73-0373
The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ALSA-2026:82013 Important: libreoffice security update
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...
CVE-2026-83966: Out-of-bounds Write
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-103846: Improper Neutralization of Input During Web Page Generation
Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation o...
CVE-2026-105903: Improper Control of Generation of Code
ColdFusion is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue doe...
PT-2026-113397
šØ CVE-2026-100112 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. š@cveNotify...
MiracleLinux 8 : dovecot-2.3.16-16.el8_10 (AXSA:2026-2032:07)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2032:07 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorre...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : libheif vulnerabilities (USN-8683-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8683-1 advisory. Feng Ning discovered that libheif incorrectly handled certain image transforms. A remote attacker could possibly use...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Engrampa vulnerability (USN-8640-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8640-1 advisory. It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this...
NGOAM Protocol SRv6 Cisco NX-OS Code Execution
The vulnerability of the NGOAM protocol and the SRv6 technology of the Cisco NX-OS operating system for Cisco Nexus 9000 Series network devices relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Graphics Kernel Subsystem Code Execution
The vulnerability of the Graphics Kernel subsystem in Windows operating systems is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PT-2026-113274
šØ CVE-2026-103832 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. š@cveNotify...
CVE-2026-78802: Improper Control of Generation of Code
An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router AX1800M V1.0.3 allows a remote attacker to execute arbitrary code...
CVE-2026-104341: Out-of-bounds Write
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-113458
Name of the Vulnerable Software and Affected Versions Photoshop Desktop affected versions not specified Description An out-of-bounds write issue exists, which occurs when a program writes data past the end of a defined memory buffer. This could allow arbitrary code execution in the context of the...
CVE-2026-103830: Stack-based Buffer Overflow
Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-113278
šØ CVE-2026-103836 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. š@cveNotify...
PT-2026-113343
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...
ndsudo Code Execution
The vulnerability of the ndsudo component of the Netdata monitoring software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2026-78799: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in Quanxun Huiju Network Technology Beijing Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: = iKuai83.7.23Enterprise Build 202606021825 - Free Edition: = iKuai 84.0.304-beta allows a remote attacker to execute arbitrary code...