436681 matches found
EUVD-2026-69706
Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path...
Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path
Summary Excel::store resolved the destination path against the process working directory rather than the configured filesystem disk. When that path resolved to an existing file, the export was written straight to it with fopen, bypassing the disk entirely. An application that passes a...
GHSA-C7R6-VX3H-W5G2 Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path
Summary Excel::store resolved the destination path against the process working directory rather than the configured filesystem disk. When that path resolved to an existing file, the export was written straight to it with fopen, bypassing the disk entirely. An application that passes a...
EUVD-2026-74115
Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81984 Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81984
Adobe Acrobat Reader is affected by a Use After Free (CWE-416) vulnerability that can lead to disclosure of sensitive memory . An attacker must get a victim to open a malicious file, and exploitation requires user interaction with a local attack vector . The CVSS 3.1 score is 5.5 (MEDIUM) with hi...
CVE-2026-81984 Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81991 Acrobat Reader | Out-of-bounds Read (CWE-125)
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81991
Acrobat Reader is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to disclosure of sensitive memory . Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector with low complexity, ...
CVE-2026-81989 Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81991 Acrobat Reader | Out-of-bounds Read (CWE-125)
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81989 Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81989
Adobe Acrobat Reader is affected by a Use After Free (CWE-416) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as the victim must open a malicious file. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vect...
EUVD-2026-74112
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81980 Acrobat Reader | Out-of-bounds Write (CWE-787)
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81980
Adobe Acrobat Reader is affected by an out-of-bounds write (CWE-787) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a ...
CVE-2026-81990
Adobe Acrobat Reader is affected by a Use After Free flaw (CWE-416) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file . The CNA-assigned CVSS 3.1 score is 7.8 (High) with vector AV:L/AC:L/PR:N/...
EUVD-2026-74111
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81990 Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81990 Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...