Critical Photon OS Security Update - PHSA-2026-4.0-0976

Updates of 'ruby', 'ImageMagick' packages of Photon OS have been released...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the advanceperiodictargetexpiration function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker t...

EUVD-2026-10487

Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline on Windows allows Configuration/Environment Manipulation.This issue affects Visionline: from 1.0 before 1.33...

EUVD-2026-10594

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-25178 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-23672

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

CVE-2026-25836

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox Cloud 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP requests...

Microsoft Windows Buffer Error Vulnerability

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. Microsoft Windows has a buffer error vulnerability. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows Server 2022 Server...

PT-2026-24159

SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's...

Microsoft Windows GDI+ Buffer Error Vulnerability

Microsoft Windows GDI+ is a graphics device interface for the Windows operating system developed by Microsoft Corporation. This software is part of the .NET framework and is responsible for rendering graphical images and displaying information on the screen and printers. Microsoft Windows GDI+ ha...

Microsoft Windows Resource Management Vulnerability

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a resource management vulnerability in Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 11...

Linux Distros Unpatched Vulnerability : CVE-2025-69653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09-13, fixed in commit 1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6...

PT-2026-24236

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 8.0.0 through 8.0.1 Fortinet FortiWeb versions 7.6.0 through 7.6.5 Fortinet FortiWeb versions 7.4.0 through 7.4.11 Fortinet FortiWeb versions 7.2.0 through 7.2.12 Fortinet FortiWeb versions 7.0.0 through 7.0.12...

Fortinet FortiWeb operating system command injection vulnerability

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the decoding of audio...

APSB26-28 : Security Updates Available for Adobe Premiere Pro

Adobe has released updates for Adobe Premiere Pro for Windows and macOS. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

Linux SMB Server recv_done() Function Heap Buffer Overflow DoS

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Direct Rendering Infrastructure AMD GPU dcn303_stream_encoder_create Heap Buffer Overflow

The vulnerability of the dcn303streamencodercreate function in the drivers/gpu/drm/amd/display/dc/dcn303/dcn303resource.c file, a driver for the Direct Rendering Infrastructure DRI of AMD video cards, related to Linux operating systems, involves reading beyond the buffer boundaries. Exploiting th...

etas_es58x component in the Data Compromise

The vulnerability of the etases58x component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through th...