PT-2026-111793

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse fixed interpolates a fixed type's aliases value directly into a generated types.confixed...

PT-2026-111354

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...

CVE-2026-105895: Improper Input Validation

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require use...

CVE-2026-104341: Out-of-bounds Write

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104342: Use After Free

Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-108380: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFieldRepresentation.addfieldproperties inserts a schema field's doc value between the quotes of a...

CVE-2026-108381: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the Pydantic and AvroDantic model generators insert a schema field's pydantic-class value after pydantic. in a...

CVE-2026-83966: Out-of-bounds Write

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-89107: Improper Control of Generation of Code

SAP S/4HANA Manage Substitution/Validation Rules does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could submit specially crafted input, which is interpret...

CVE-2026-92892: Improper Neutralization of Argument Delimiters in a Command

Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later...

ALSA-2026:82013 Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

ROS-20261013-73-0343

The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2025-58772: Buffer Copy without Checking Size of Input

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

Graphics Kernel Subsystem Code Execution

The vulnerability of the Graphics Kernel subsystem in Windows operating systems is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-113420

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

APSB26-171 : Security update available for Adobe Dimension

Adobe has released a priority 3 security update for Adobe Dimension. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, application denial-of-service, and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues...

APSB26-167 : Security update available for Adobe Bridge

Adobe has released a priority 3 security update for Adobe Bridge. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

APSB26-172 : Security update available for Adobe FrameMaker

Adobe has released a priority 3 security update for Adobe FrameMaker. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, application denial-of-service, and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues...

APSB26-144 : Security update available for Adobe ColdFusion

Adobe has released a priority 2 security update for Adobe ColdFusion. This update addresses vulnerabilities rated critical and high that could result in arbitrary code execution, security feature bypass, arbitrary file system write, privilege escalation, arbitrary file system read, application...

APSB26-152 : Security update available for Adobe Experience Manager

Adobe has released a priority 2 security update for Adobe Experience Manager. This update addresses vulnerabilities rated critical and medium that could result in arbitrary code execution, security feature bypass, and privilege escalation. Adobe is not aware of any exploits in the wild for any of...