PT-2026-89580

TRC analysis shows authenticated attackers are exploiting CVE-2026-87020 to crash Orthanc DICOM servers by uploading malicious PNG/JPEG images. The integer overflow triggers heap corruption, disrupting medical imaging operations across healthcare facilities. Healthcare Vulnerability :link: Full...

CVE-2026-88035: Integer Overflow or Wraparound

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...

CVE-2026-88015: Integer Overflow or Wraparound

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclonelink objects, and fs.RangeOption.Decode can pass an unchecked positive Range start through...

CVE-2026-88015: Integer Overflow or Wraparound

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclonelink objects, and fs.RangeOption.Decode can pass an unchecked positive Range start through...

PT-2026-89507

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library DJL from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload. To...

Security Updates for Microsoft Publisher Products C2R (September 2026)

The Microsoft Publisher Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. CVE-2026-69742 - Deserialization of untrusted data ...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-2131)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2131 advisory. Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context.A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function...

Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-039481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-039481 advisory. A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output...

CVE-2026-16174: Integer Overflow or Wraparound

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DIC...

Adobe Acrobat Pro DC JPEG Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

Adobe Photoshop DCM JPEG Image Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DIC...

Adobe Photoshop DCM File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DIC...

CVE-2026-85228: Integer Overflow or Wraparound

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library DJL from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload. To...

Important: containerd

Issue Overview: Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component...

Important: containerd

Issue Overview: Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component...

Important: containerd

Issue Overview: Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component...

Adobe Photoshop Integer Overflow RCE

The vulnerability of the Adobe Photoshop graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-89652

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

CVE-2026-35250

CVE-2026-35250 mi primer CVE es un 2.3 Desbordamiento de enteros en DevVGAVBVA puede causar DoS desde un invitado privilegiado Hallazgo asistido por IA y PoC completamente escrito por IA El problema está en src/VBox/Devices/Graphics/DevVGAVBVA.cpp:740-743 ASSERTGUESTMSGRETURN donde la comprobació...