CVE-2026-42376

creationtimestamp| type| source ---|---|--- 2026-05-04 17:02:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116517380246425239 2026-05-04 18:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2autcjzk2f 2026-05-04 18:44:20+00:00| seen|...

CVE-2026-42078

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...

CVE-2026-42078

PVE: CVE-2026-42078 affects PPTAgent, an agentic framework for reflective PowerPoint generation. Before commit 418491a, the code path markdown_table_to_image allows arbitrary file write and directory creation. The issue has been patched via commit 418491a. Impact ranges from low to potentially en...

CVE-2026-42078 PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...

CVE-2026-42078 PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...

CVE-2026-42078 PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...

CVE-2026-41181

creationtimestamp| type| source ---|---|--- 2026-05-04 16:54:31+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-p6hg-qh38-555r 2026-05-05 14:35:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fuoznxy2b 2026-05-05 16:20:01+00:00|...

CVE-2026-42375

creationtimestamp| type| source ---|---|--- 2026-05-04 16:48:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116517327062901025 2026-05-04 18:08:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bcuhvhu2z 2026-05-04 18:30:01+00:00| seen|...

CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...

CVE-2025-47407

CVE-2025-47407 describes a memory corruption in the DSP service during process creation caused by an allocation failure at the kernel level, linked to a TOCTOU race condition. Connected records identify a kernel-level allocation failure as the underlying trigger and the DSP service as the affecte...

CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...

CVE-2025-47407

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...

EUVD-2025-209632

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...

CVE-2026-42809

Apache Polaris can issue broad temporary "vended" storage credentials during staged table creation before the effective table location has been validated or durably reserved. Those temporary credentials are meant to limit the scope of accessible table data and metadata, but this scope limitation...

CVE-2026-42809 Apache Polaris: staged table creation could vend storage credentials for unvalidated locations

Apache Polaris can issue broad temporary "vended" storage credentials during staged table creation before the effective table location has been validated or durably reserved. Those temporary credentials are meant to limit the scope of accessible table data and metadata, but this scope limitation...

EUVD-2026-27033

Apache Polaris can issue broad temporary "vended" storage credentials during staged table creation before the effective table location has been validated or durably reserved. Those temporary credentials are meant to limit the scope of accessible table data and metadata, but this scope limitation...

CVE-2026-42809 Apache Polaris: staged table creation could vend storage credentials for unvalidated locations

Apache Polaris can issue broad temporary "vended" storage credentials during staged table creation before the effective table location has been validated or durably reserved. Those temporary credentials are meant to limit the scope of accessible table data and metadata, but this scope limitation...

CVE-2026-42809 Apache Polaris: staged table creation could vend storage credentials for unvalidated locations

Apache Polaris can issue broad temporary "vended" storage credentials during staged table creation before the effective table location has been validated or durably reserved. Those temporary credentials are meant to limit the scope of accessible table data and metadata, but this scope limitation...

CVE-2026-42809

Apache Polaris is affected via the staged-create path where an authenticated, low-privilege user can supply a custom location during stage create and request credential vending. Polaris issues broad temporary (vended) storage credentials tied to that location before normal validation and overlap ...

GHSA-M8RW-V4F6-8787

creationtimestamp| type| source ---|---|--- 2026-05-04 14:34:05+00:00| seen| https://t.me/bdufstecru/3129 2026-05-11 18:18:34+00:00| seen| https://infosec.exchange/users/shadowserver/statuses/116557316906275011...