Adobe Substance 3D Designer <= 16.0.5 Multiple Vulnerabilities (APSB26-169)

The version of Adobe Substance 3D Designer installed on the remote host is prior or equal to 16.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-169 advisory. - Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in...

Debian dla-4838 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4838 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4838-1 [email protected]...

Debian dsa-6566 : expat - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6566 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6566-1 [email protected] https://www.debian.org/securit...

CVE-2025-52097

The software InstantForum.NET v4.1.4 by InstantASP Ltd. (no longer in operation) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the reflection of un-sanitized input from the hbhxg query string parameter directly into the HTML response without proper outpu...

KLA91351 ACE vulnerability in Microsoft Windows

Arbitrary code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-96202 Exploitation Related products Raw-Image-Extension CVE list CVE-2026-96202 critical KB list Solution Install necessary...

CVE-2026-15176

A flaw was found in nginx. A remote, unauthenticated attacker can trigger a heap-based buffer overflow by sending crafted HTTP requests to a server configured with specific alias and rewrite directives that reference the request filename variable. Successful exploitation may allow an attacker to...

CVE-2026-92777

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code...

CVE-2026-92777

A potential vulnerability exists in some Lenovo Tablets that could allow an attacker with physical access to an unlocked device to bypass device protections and execute arbitrary code . The underlying cause is associated with the use of a default cryptographic key (CWE-1349). No specific exploit ...

CVE-2026-92629

A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-75941

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code...

CVE-2026-110920

Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110914

Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-110920

Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110921

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110921

A use-after-free vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code inside the browser sandbox. This flaw occurs because memory is accessed after being released, and it can be triggered by convincing a user to visit a crafted HTML page . The vulnerability...

CVE-2026-110920

Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110921

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

[SECURITY] [DSA 6563-1] mutt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6563-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 15, 2026 https://www.debian.org/security/faq -...

CVE-2017-20286

A flaw was found in DevIL. A heap-based buffer overflow exists in its palette handling routine when decoding GIF Graphics Interchange Format files. By convincing a user or system to process a specially crafted GIF image, an attacker could trigger out-of-bounds memory writes, potentially leading t...

CVE-2026-55453

A flaw was found in CUPS. A remote attacker controlling a network printer can achieve arbitrary code execution by returning crafted printer status messages containing newline characters. The CUPS Internet Printing Protocol IPP backend fails to sanitize line breaks in status attributes, allowing...