EUVD-2026-49933

Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48372

Format Plugins (Adobe) suffers a heap-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). A security update (Adobe APSB26-87) addresses critical vulnerabilities in Format Pl...

CVE-2026-48372 Format Plugins | Heap-based Buffer Overflow (CWE-122)

Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48388

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the...

CVE-2026-48388 Photoshop Installer | CWE-427: Uncontrolled Search Path Element

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the...

CVE-2026-48388

Adobe Photoshop Installer is affected by an Uncontrolled Search Path Element vulnerability. An attacker could achieve arbitrary code execution in the context of the current user by placing a malicious library in a directory that the installer searches. Exploitation requires user interaction, with...

PT-2026-65556

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...

PT-2026-65557

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...

PT-2026-65554

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Untrusted Search Path issue exists where the application may load a malicious DLL or executable from an unexpected location. This could allow a low-privileged attacker to achieve arbitrary...

PT-2026-65553

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Incorrect Authorization issue allows for privilege escalation, enabling an attacker to obtain unauthorized read and write access. Exploitation requires user interaction, specifically...

Adobe Commerce (Magento) - Remote Code Execution

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. id: CVE-2022-24086 info: name:...

CVE-2026-43499: A Critical Analysis of the "Zero-Self" Fallacy

This document presents a comprehensive technical analysis refuting the claim that CVE-2026-43499 GhostLock constitutes "no real vulnerability" due to its requirement for local access and user interaction. Through rigorous examination of the attack surface, exploitation vectors, and real-world...

Astra Linux – Vulnerability in Chromium

The use of FileSystem’s “after free” feature in Google Chrome before version 148.0.7778.168 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially execute a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

Oracle VM VirtualBox (July 2026 CPU)

The 7.2.8 version of VM VirtualBox installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.8. Easil...

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data. The shortcoming has been codenamed HermeticReader by Guardi...

EUVD-2026-47538

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-47513

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public...

EUVD-2026-47442

Vulnerability in the Oracle HRMS Japanese product of Oracle E-Business Suite component: Oracle Payroll Japanese. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HRMS...

EUVD-2026-47416

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: Oracle SSL API. The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via TLS to compromise Oracle Security Service...

EUVD-2026-47397

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Install. The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering...