CVE-2026-90532: Incorrect Authorization

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-92892: Improper Neutralization of Argument Delimiters in a Command

Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later...

ALSA-2026:82013 Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

ROS-20261013-73-0343

The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2025-58772: Buffer Copy without Checking Size of Input

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

ndsudo Code Execution

The vulnerability of the ndsudo component of the Netdata monitoring software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

NGOAM Protocol SRv6 Cisco NX-OS Code Execution

The vulnerability of the NGOAM protocol and the SRv6 technology of the Cisco NX-OS operating system for Cisco Nexus 9000 Series network devices relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Graphics Kernel Subsystem Code Execution

The vulnerability of the Graphics Kernel subsystem in Windows operating systems is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-95639: Incorrect Authorization

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim...

Siemens RUGGEDCOM CROSSBOW Station Access Controller

SUMMARY RUGGEDCOM CROSSBOW Station Access Controller SAC contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM...

APSB26-152 : Security update available for Adobe Experience Manager

Adobe has released a priority 2 security update for Adobe Experience Manager. This update addresses vulnerabilities rated critical and medium that could result in arbitrary code execution, security feature bypass, and privilege escalation. Adobe is not aware of any exploits in the wild for any of...

APSB26-171 : Security update available for Adobe Dimension

Adobe has released a priority 3 security update for Adobe Dimension. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, application denial-of-service, and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues...

APSB26-144 : Security update available for Adobe ColdFusion

Adobe has released a priority 2 security update for Adobe ColdFusion. This update addresses vulnerabilities rated critical and high that could result in arbitrary code execution, security feature bypass, arbitrary file system write, privilege escalation, arbitrary file system read, application...

APSB26-172 : Security update available for Adobe FrameMaker

Adobe has released a priority 3 security update for Adobe FrameMaker. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, application denial-of-service, and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues...

APSB26-158 : Security update available for Adobe Photoshop

Adobe has released a priority 3 security update for Adobe Photoshop. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in this...

APSB26-167 : Security update available for Adobe Bridge

Adobe has released a priority 3 security update for Adobe Bridge. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : libheif vulnerabilities (USN-8683-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8683-1 advisory. Feng Ning discovered that libheif incorrectly handled certain image transforms. A remote attacker could possibly use...

MiracleLinux 8 : dovecot-2.3.16-16.el8_10 (AXSA:2026-2032:07)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2032:07 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorre...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : libpng vulnerabilities (USN-8639-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8639-1 advisory. Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Engrampa vulnerability (USN-8640-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8640-1 advisory. It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this...