7-Zip < 26.02 XZ Heap Buffer Overflow RCE (ZDI-26-444)

The version of 7-Zip installed on the remote host is prior to 26.02. It is, therefore, affected by a remote code execution vulnerability as referenced in the ZDI-26-444 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User...

Microsoft Office: CVE-2026-97748: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-113496

Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Microsoft Windows: CVE-2026-85936: Windows Shell Remote Code Execution Vulnerability

Double free in Windows Shell allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96864: Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-84012: Windows Remote Desktop Services Remote Code Execution Vulnerability

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

KLA91344 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote...

Microsoft Office: CVE-2026-97745: Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

SUSE SLED15: libunbound8 / unbound / unbound-anchor / unbound-devel / etc (SUSE-SU-2026:4620-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4620-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEM...

PT-2026-112217

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

PT-2026-112383

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Office 2024 Description An untrusted pointer dereference allows an unauthorized attacker to execute code over a network. A pointer dereference occurs when a program attempts to read or writ...

PT-2026-111993

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists that allows an unauthorized attacker to execute arbitrary code over a network via a malicious file. Recommendations At the moment, there is n...

PT-2026-111980

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

PT-2026-111981

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

PT-2026-111984

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

PT-2026-111937

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...

PT-2026-111889

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...

PT-2026-111886

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-111568

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.9.0 through 4.14.7 Description An arbitrary file overwrite issue exists in the MasterHandler.process files from worker function. A compromised cluster worker can bypass protections using a trailing-slash basename bypass and th...

PT-2026-111566

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.3.0 through 4.14.7 Description A remote code execution issue exists where the trust for Security Configuration Assessment SCA policies is determined by the file path instead of the configuration source. An attacker with contro...