PT-2026-7947

Name of the Vulnerable Software and Affected Versions GFI Archiver affected versions not specified Description A flaw exists in GFI Archiver related to the configuration of the MArc.Store.Remoting.exe process. The issue stems from insufficient validation of user-supplied data, leading to the...

PT-2026-7948

Name of the Vulnerable Software and Affected Versions GFI Archiver affected versions not specified Description A flaw exists in GFI Archiver related to the deserialization of untrusted data within the MArc.Core component. This allows remote attackers to potentially execute arbitrary code on...

CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

Deserialization of Untrusted Data

Overview diskcache is a Disk Cache -- Disk and file backed persistent cache. Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the unsafe use of the pickle.load function in the Cache class. An attacker can execute arbitrary code by writing malicious data...

kernel: Linux kernel: ath9k_htc out-of-bounds access vulnerability

A flaw was found in the Linux kernel's ath9khtc component. This vulnerability allows a local attacker to cause a denial of service or potentially disclose sensitive information via passing untrusted data to testbit...

Deserialization of Untrusted Data

Overview azure-ai-language-conversations-authoring is a Microsoft Corporation Azure Ai Language Conversations Authoring Client Library for Python Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the getcontinuationtoken function. An attacker can execute...

Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE

Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network...

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

Microsoft Outlook Spoofing Vulnerability

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

Azure SDK for Python Remote Code Execution Vulnerability

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

PT-2026-7397

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description The software contains a flaw related to data spoofing. This issue allows an unauthorized attacker to perform spoofing over a network through deserialization of untrusted data...

PT-2026-7411

Name of the Vulnerable Software and Affected Versions Azure AI Language Authoring SDK version 1.0.0 Description A flaw exists in the Azure AI Language Authoring SDK that allows an unauthorized attacker to execute code over a network. This is due to the deserialization of untrusted data. The issue...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the preview.php file. An attacker can execute arbitrary code and compromise confidentiality, integrity, and availability by sending specially crafted serialized data to the affected endpoint. Detail...

Deserialization of Untrusted Data

Overview epyt-flow is an EPyT-Flow -- EPANET Python Toolkit - Flow Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the type parameter in myloadfromjson. An attacker can execute arbitrary code by supplying a malicious JSON body containing a type field that...