CVE-2026-48388

Adobe Photoshop Installer is affected by an Uncontrolled Search Path Element vulnerability. An attacker could achieve arbitrary code execution in the context of the current user by placing a malicious library in a directory that the installer searches. Exploitation requires user interaction, with...

PT-2026-65558

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Untrusted Search Path issue exists that could allow arbitrary code execution in the context of the current user. This occurs when the application searches for files in an insecure order or...

PT-2026-65556

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...

PT-2026-65555

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...

PT-2026-65554

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Untrusted Search Path issue exists where the application may load a malicious DLL or executable from an unexpected location. This could allow a low-privileged attacker to achieve arbitrary...

org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method

A flaw was found in plexus-utils. This vulnerability, known as a Directory Traversal, exists within the extractFile method. An attacker can exploit this to execute unauthorized code on the system in the context of the current working user...

EUVD-2026-45290

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48373

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-63093 Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves a...

PT-2026-60851

Name of the Vulnerable Software and Affected Versions Acrobat Reader affected versions not specified Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting memory. This issue could allow arbitrary code...

org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method

A flaw was found in plexus-utils. This vulnerability, known as a Directory Traversal, exists within the extractFile method. An attacker can exploit this to execute unauthorized code on the system in the context of the current working user...

EUVD-2026-44563

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-44527

CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access o...

CVE-2026-48287

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must...

CVE-2026-48287

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must...

CVE-2026-48343

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48344

Creative Cloud Desktop is affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user...

CVE-2026-48325

ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-48340

Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48319

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code...