PT-2026-24371

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.1.2 and earlier Description The software is susceptible to a NULL Pointer Dereference issue that may result in a denial-of-service condition. An attacker could leverage this to crash the application, disruptin...

PT-2026-24385

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.1.2 and earlier Description Substance3D - Painter is affected by an out-of-bounds read issue that may result in memory exposure. An attacker could potentially access sensitive information stored in memory by...

PT-2026-24468

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30307 through 25.001.21265 Description A Use After Free issue exists in Acrobat Reader that may allow for arbitrary code execution with the privileges of the current user. Successful exploitation of this issue...

PT-2026-24445

In mfc handle released buf of mfc core isr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-24348

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. A heap-based buffer overflow exists in the CIccCalculatorFunc::InitSelectOp function, triggered by local user...

PT-2026-24490

Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...

PT-2026-24452

In EfwApTransport::ProcessRxRing of efw ap transport.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-24553

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4-p16 through 2.4.9-alpha3 Description Adobe Commerce is affected by an Incorrect Authorization issue that could allow a security feature bypass. An attacker could exploit this to gain unauthorized view access to da...

PT-2026-24444

In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2026-24437

Name of the Vulnerable Software and Affected Versions PowerVR GPU affected versions not specified Description The register protection of the PowerVR GPU is incorrectly configured, potentially leading to local information disclosure. Exploitation does not require additional execution privileges or...

PT-2026-24450

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description A use-after-free read issue exists in VPU due to a race condition. Successful exploitation of this issue could lead to local information disclosure and does not require additional execution...

PT-2026-24393

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.7 and earlier Description Substance3D - Stager versions 3.1.7 and earlier are susceptible to a Use After Free issue, potentially leading to arbitrary code execution with the privileges of the current user...

PT-2026-24492

Improper input validation in the UEFI WheaERST module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

PT-2026-24500

Name of the Vulnerable Software and Affected Versions Illustrator versions 29.8.4 and earlier Illustrator version 30.1 Description The software contains an out-of-bounds write issue that may allow for arbitrary code execution with the privileges of the current user. Successful exploitation requir...

PT-2026-24435

Name of the Vulnerable Software and Affected Versions KVM versions affected versions not specified Description An out-of-bounds write issue exists in the hyp alloc function within arch/arm64/kvm/hyp/nvhe/alloc.c. This is due to insufficient input validation. Successful exploitation could lead to...

PT-2026-24388

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.1.2 and earlier Description Substance3D - Painter is affected by an Out-of-bounds Read issue that may result in memory exposure. An attacker could potentially access sensitive information stored in memory by...

PT-2026-24443

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-24373

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.1.2 and earlier Description Substance3D - Painter versions 11.1.2 and earlier are susceptible to an out-of-bounds read issue, potentially leading to memory exposure. Successful exploitation requires a user to...

PT-2026-24449

Name of the Vulnerable Software and Affected Versions modem affected versions not specified Description An out-of-bounds write issue exists due to an incorrect bounds check. This could allow for remote code execution without requiring additional privileges or user interaction. Recommendations At...

PT-2026-24446

In mfc dec dqbuf of mfc dec v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...