PT-2026-103776

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

PT-2026-105088

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

PT-2026-105085

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-targeting-pack-9.0 / dotnet / etc (crlsa-2025_7571)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257571 advisory. dotnet: .NET and Visual Studio Spoofing Vulnerability CVE-2025-26646 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc (crlsa-2025_7598)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257598 advisory. dotnet: .NET and Visual Studio Spoofing Vulnerability CVE-2025-26646 Tenable has extracted the preceding description block directly from the CIQ security advisory...

CVE-2026-103082: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc (crlsa-2025_7589)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257589 advisory. dotnet: .NET and Visual Studio Spoofing Vulnerability CVE-2025-26646 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc (crlsa-2025_7600)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257600 advisory. dotnet: .NET and Visual Studio Spoofing Vulnerability CVE-2025-26646 Tenable has extracted the preceding description block directly from the CIQ security advisory...

CLEANSTART-2026-ZD06133 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CLEANSTART-2025-CH00091 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CLEANSTART-2026-NJ16875 tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'

Security vulnerability affects the git package. A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'...

CLEANSTART-2026-NS24278 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CLEANSTART-2025-OK96384 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

@cafeai/cafe-code (0.0.28), @dualityinstitute/blink (>=0.0.1, <=0.0.14) +12 more potentially affected by CVE-2026-102674 via electron (>=41.0.3, <=41.10.5)

electron NPM version =41.0.3, =0.0.1, =1.4.2, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.2.2, =1.3.5 Source cves: CVE-2026-102674 Source advisory: SNYK:JS-ELECTRON-20335494...

EUVD-2026-88756

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

The vulnerability of the Microsoft SQL Server Management Studio (SSMS) database management tool, related to the lack of measures taken to neutralize special elements, allows attackers to increase their privileges.

The vulnerability of the Microsoft SQL Server Management Studio SSMS management tool is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of Microsoft Visual Studio Code’s source editor, related to a flaw in its data protection mechanism, allows attackers to bypass existing security measures.

The vulnerability of Microsoft Visual Studio Code’s editor is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

CVE-2026-98055

A flaw was found in the Linux kernel's Intel Audio Voice Studio AVS driver. This flaw can lead to a Denial of Service DoS due to improper resource cleanup during device initialization. When probing an audio device, the driver fails to check return codes from capability queries and does not releas...

The vulnerability of the .NET software platform and the Visual Studio Code editor lies in buffer overflows in dynamic memory, which allows attackers to escalate their privileges.

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the .NET software platform and the Visual Studio Code code editor, related to improper deletion of critical data at the boundary, allows a hacker to trigger a service failure.

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...