Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to the use of memory after release. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : YAML-LibYAML vulnerabilities (USN-8925-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8925-1 advisory. Dominique Dumont discovered that YAML-LibYAML did not correctly handle certain reflection...

Debian dsa-6562 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6562 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6562-1 [email protected] https://www.debian.org/securit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gvfs (UTSA-2026-130161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130161 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds...

MiracleLinux 9 : dovecot-2.3.16-18.el9_8.8 (AXSA:2026-2051:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2051:08 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorre...

CVE-2026-105474: Improper Neutralization of Special Elements Used in a Template Engine

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root...

HPE NonStop Posix User Threads buffer error vulnerability

The HPE NonStop Posix User Threads T1280L02 ACG and earlier versions contain a buffer error vulnerability stemming from a heap buffer overflow, which may lead to arbitrary code execution...

CVE-2026-110812: Deserialization of Untrusted Data

Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in...

CVE-2026-79830: Stack-based Buffer Overflow

A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution...

PT-2026-115315

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Memory corruption in Workers allows a remote attacker to potentially execute arbitrary code inside the sandbox when a user opens a crafted HTML page. Recommendations Update Google Chrom...

PT-2026-115314

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Memory corruption occurs in the DOM Document Object Model, which is the programming interface for HTML and XML documents. This issue allows a remote attacker to execute arbitrary code...

PT-2026-115333

A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the NoMachine Device Serve...

UBUNTU-CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

PT-2026-121190

Уязвимость программного средства загрузки, установки и активации программного обеспечения Siemens Software Center связана с неконтролируемым элементом пути поиска. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с повышенными привилегиями с помощью специально...

RockyLinux 8 : idm:DL1 (RLSA-2026:83460)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83460 advisory. ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in...

AlmaLinux 9.2 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792080478)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792080478 advisory. - GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp- user-regexp has an...

GitLab Git Whole Number Overflow Code Execution

The vulnerability in the Git-based software platform for collaborative code editing on GitLab is related to an integer overflow. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

AlmaLinux 9 : libreoffice (ALSA-2026:82013)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82013 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the XkbChangeKeycodeRan...