CVE-2026-112036

The Artifex MuPDF software (up to version 1.28.5 ) contains a double free vulnerability in the Signature Locking component. The flaw exists within the free_char_list function located in the file source/pdf/pdf-xref.c. This issue can be triggered remotely through specific manipulation, potentially...

EUVD-2026-104029

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

CVE-2026-112036 Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

CVE-2026-112036 Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

CVE-2026-112036

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

CVE-2026-112036: Double Free

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

PT-2026-117556

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-112036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature...

CVE-2026-85248: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. The producer held a single java.security.Signature instance and used it for...

PT-2026-117552

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-16487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned...

Signature Knowledge Shielding: Protecting Antivirus Detection Knowledge through Robust Embedding Matching

Antivirus AV signatures encode valuable detection knowledge accumulated through expert analysis, yet repeated black-box queries can expose this knowledge for unauthorized reuse and targeted evasion. We propose Signature Knowledge Shielding SKS, a design paradigm that protects existing AV rules,...

PT-2026-117171

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free char list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be...

PT-2026-117234

Name of the Vulnerable Software and Affected Versions bootc affected versions not specified Description An issue exists when using the default containers signature policy. During automatic or manual upgrades of a mutable image tag, unsigned content may be applied for registries that fall through ...

CVE-2026-109553

The Gitea SSH server is vulnerable to principal impersonation due to an incorrect logic in how it resolves SSH certificate principals. The software incorrectly searches the content of all stored public keys instead of only the principal keys. This issue occurs when Gitea trusts a user certificate...

CVE-2026-109553 Gitea SSH certificate principal impersonation of other users

Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal keys. When Gitea trusts a user certificate authority SSHTRUSTEDUSERCAKEYS and accepts arbitrary principals SSHAUTHORIZEDPRINCIPALSALLOW=anything, a user could register...

CVE-2026-109553 Gitea SSH certificate principal impersonation of other users

Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal keys. When Gitea trusts a user certificate authority SSHTRUSTEDUSERCAKEYS and accepts arbitrary principals SSHAUTHORIZEDPRINCIPALSALLOW=anything, a user could register...

dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-110383

Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms signature-fluent-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electronic Signature Add-on for Fluent...

EUVD-2026-103426

Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms signature-fluent-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electronic Signature Add-on for Fluent...