PT-2026-32891

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.2 and 21.2 and earlier Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue could result in arbitrary code execution in the...

PT-2026-32946

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions prior to 2022.9 Description An Integer Underflow Wrap or Wraparound issue exists where an arithmetic operation results in a value smaller than the minimum representable value, causing it to wrap around to a very large...

PT-2026-32901

Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or render it unresponsive. Exploitation of this issue requires user interaction in that...

PT-2026-32703

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.2 and 21.2 and earlier Description An out-of-bounds write occurs when a program writes data past the end of the intended buffer. This issue could result in arbitrary code execution in the context of the current...

PT-2026-32941

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions prior to 2022.9 Description A Use After Free issue exists where the software continues to use a memory location after it has been freed. This could result in arbitrary code execution in the context of the current user...

Adobe Reader < 26.001.21431 Multiple Vulnerabilities (APSB26-44)

The version of Adobe Reader installed on the remote Windows host is a version prior to 26.001.21431. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Obje...

PT-2026-32892

InDesign Desktop | Heap-based Buffer Overflow CWE-122 CVE: CVE-2026-34628 PT ID: PT-2026-32892 Vendor: Adobe Product: InDesign Desktop CVSS: 7.8 Credits: n/a Description: InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resul...

PT-2026-32906

Bridge | Heap-based Buffer Overflow CWE-122 CVE: CVE-2026-27313 PT ID: PT-2026-32906 Vendor: Adobe Product: Bridge CVSS: 7.8 Credits: n/a Description: Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio...

PT-2026-32893

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.2 and 21.2 and earlier Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue could result in arbitrary code execution in the...

Schneider Electric PowerChute Serial Shutdown 日志信息泄露漏洞

Schneider Electric PowerChute Serial Shutdown is a UPS management, normal shutdown and energy management software from Schneider Electric France. Schneider Electric PowerChute Serial Shutdown suffers from a log information disclosure vulnerability that can be exploited by an attacker to cause a W...

PT-2026-32947

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions prior to 2022.9 Description An Access of Resource Using Incompatible Type Type Confusion issue exists, which could lead to arbitrary code execution in the context of the current user. This occurs when a victim opens a...

PT-2026-32935

InCopy | Out-of-bounds Write CWE-787 CVE: CVE-2026-34631 PT ID: PT-2026-32935 Vendor: Adobe Product: InCopy CVSS: 7.8 Credits: n/a Description: InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the contex...

PT-2026-32944

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions prior to 2022.9 Description An out-of-bounds write issue exists where the software writes data past the end of the intended buffer, which could result in arbitrary code execution in the context of the current user...

PT-2026-32673

CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user executes a malicious file provided by an attacker...

PT-2026-32904

Bridge | Heap-based Buffer Overflow CWE-122 CVE: CVE-2026-27311 PT ID: PT-2026-32904 Vendor: Adobe Product: Bridge CVSS: 7.8 Credits: n/a Description: Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio...

PT-2026-32905

Bridge | Heap-based Buffer Overflow CWE-122 CVE: CVE-2026-27312 PT ID: PT-2026-32905 Vendor: Adobe Product: Bridge CVSS: 7.8 Credits: n/a Description: Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio...

CVE-2026-40312

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malicous MSL file is read. This issue has been fixed in version 7.1.2-19...

CVE-2026-40312

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malicous MSL file is read. This issue has been fixed in version 7.1.2-19...

CVE-2026-40312

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malicous MSL file is read. This issue has been fixed in version 7.1.2-19...

CVE-2026-34621

Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...