Adobe Photoshop DCM File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DIC...

Adobe Photoshop DCM JPEG Image Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DIC...

Adobe Acrobat Pro DC JPEG Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

Important: containerd

Issue Overview: Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component...

Important: containerd

Issue Overview: Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component...

CVE-2026-16174: Integer Overflow or Wraparound

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

CVE-2026-88015: Integer Overflow or Wraparound

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclonelink objects, and fs.RangeOption.Decode can pass an unchecked positive Range start through...

Amazon Linux 2 : containerd (ALASDOCKER-2026-140)

The version of containerd installed on the remote host is prior to 2.2.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-140 advisory. Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context.A...

Linux Distros Unpatched Vulnerability : CVE-2026-56711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user...

Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-039481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-039481 advisory. A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output...

PT-2026-89580

TRC analysis shows authenticated attackers are exploiting CVE-2026-87020 to crash Orthanc DICOM servers by uploading malicious PNG/JPEG images. The integer overflow triggers heap corruption, disrupting medical imaging operations across healthcare facilities. Healthcare Vulnerability :link: Full...

CVE-2026-85228: Integer Overflow or Wraparound

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library DJL from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload. To...

CVE-2026-35250

CVE-2026-35250 mi primer CVE es un 2.3 Desbordamiento de enteros en DevVGAVBVA puede causar DoS desde un invitado privilegiado Hallazgo asistido por IA y PoC completamente escrito por IA El problema está en src/VBox/Devices/Graphics/DevVGAVBVA.cpp:740-743 ASSERTGUESTMSGRETURN donde la comprobació...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the findDirectByteBufferFrameCompressedSize, decompressedDirectByteBufferSize, and getDirectByteBufferFrameContentSize native handlers in src/main/native/jnizstd.c. An attacker can crash the JVM or...

CVE-2026-56711

A flaw was found in VLC media player. An integer overflow vulnerability exists when computing the size of a picture buffer, specifically in the AllocatePicture function. A remote attacker could exploit this by providing a specially crafted Portable Network Graphics PNG image file with large width...

EUVD-2026-75021

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MINVALUE to read unmapped memory, causing JVM...

DEBIAN-CVE-2026-56711

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

CVE-2026-56711

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

CVE-2026-56711

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...

UBUNTU-CVE-2026-56711

VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process...