PT-2026-89040

Snipe-IT versions before 8.7.0 fail to HTML-escape the employee num field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCPDF's writeHTML function. Attackers can craft a malicious employee num value containing an img tag with an arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-87505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site...

CVE-2026-87505: Incorrect Authorization

Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

ROS-20260909-73-0154

The vulnerability of PDF components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PDF file...

Linux Distros Unpatched Vulnerability : CVE-2026-87585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox v...

PyPDF _get_outline() Heap Buffer Overflow DoS

The vulnerability of the getoutline function in the pypdf/doccommon.py library of the Python PDF handling library PyPDF is related to asymmetric resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

Adobe Experience Manager 6.5.0 < 6.5.3 / 2026.7.0 < 2026.8.0 Multiple Vulnerabilities (APSB26-98)

The version of Adobe Experience Manager installed on the remote host is prior to 2026.8.0, 6.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-98 advisory. - Critical XXE in Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1 and tika-parsers...

ROS-20260909-73-0155

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created PDF file...

CVE-2026-85458

A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...

CVE-2026-69586

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

EUVD-2026-73542

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

CVE-2026-69586

CVE-2026-69586 is a critical (CVSS 9.8) integer overflow or wraparound vulnerability in Microsoft Windows PDF that allows an unauthorized attacker to execute code over a network with no privileges required and no user interaction. The attack vector is network-based with low complexity , yielding ...

Microsoft Windows PDF Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

CVE-2026-69586: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

NewStart CGSL MAIN 7.02 : xpdf Multiple Vulnerabilities (NS-SA-2026-0109)

The remote NewStart CGSL host, running version MAIN 7.02, has xpdf packages installed that are affected by multiple vulnerabilities: - In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes ...

PT-2026-88685

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A double free issue exists in PDFium, a PDF rendering engine, which allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a specially crafted PDF...

PT-2026-87589

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

ROS-20260908-73-0073

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created PDF file...

PT-2026-88605

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the FileSystem component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolatio...

CVE-2026-86273

A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExUtilController.java of the component HTML-to-PDF Endpoint. This manipulation of the argument html causes...