34324 matches found
CVE-2026-87585
A double free vulnerability exists in the PDFium component of Google Chrome on Windows prior to version 153.0.8010.36 . A remote attacker could exploit this by providing a crafted PDF file to potentially execute arbitrary code within the sandbox. Microsoft Edge, being Chromium-based, also ingests...
CVE-2026-87585
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...
Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Outside In Technology. User interaction is required to exploit this vulnerability in that the target must open a malicious file or visit a malicious page. The specific flaw exists within the...
PT-2026-89040
Snipe-IT versions before 8.7.0 fail to HTML-escape the employee num field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCPDF's writeHTML function. Attackers can craft a malicious employee num value containing an img tag with an arbitrary...
Adobe Experience Manager 6.5.0 < 6.5.3 / 2026.7.0 < 2026.8.0 Multiple Vulnerabilities (APSB26-98)
The version of Adobe Experience Manager installed on the remote host is prior to 2026.8.0, 6.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-98 advisory. - Critical XXE in Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1 and tika-parsers...
CVE-2026-86771: Server-Side Request Forgery (SSRF)
Snipe-IT versions before 8.7.0 fail to HTML-escape the employeenum field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCPDF's writeHTML function. Attackers can craft a malicious employeenum value containing an img tag with an arbitrary HTT...
Linux Distros Unpatched Vulnerability : CVE-2026-87505
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site...
Linux Distros Unpatched Vulnerability : CVE-2026-87585
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox v...
CVE-2026-87505: Incorrect Authorization
Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
ROS-20260909-73-0154
The vulnerability of PDF components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PDF file...
ROS-20260909-73-0155
The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created PDF file...
ROS-20260909-73-0122
The vulnerability of the PDFium component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created PDF file...
PyPDF _get_outline() Heap Buffer Overflow DoS
The vulnerability of the getoutline function in the pypdf/doccommon.py library of the Python PDF handling library PyPDF is related to asymmetric resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-85458
A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...
CVE-2026-69586
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...
EUVD-2026-73542
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...
CVE-2026-69586
CVE-2026-69586 is a critical (CVSS 9.8) integer overflow or wraparound vulnerability in Microsoft Windows PDF that allows an unauthorized attacker to execute code over a network with no privileges required and no user interaction. The attack vector is network-based with low complexity , yielding ...
Microsoft Windows PDF Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...
PT-2026-88685
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A double free issue exists in PDFium, a PDF rendering engine, which allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a specially crafted PDF...