PT-2026-7376

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 25.6 and earlier Description Adobe After Effects is affected by an out-of-bounds read issue when processing a specially crafted file. Successful exploitation of this issue could allow an attacker to execute code wi...

PT-2026-7380

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 25.6 and earlier Description The Adobe After Effects video and dynamic graphics editing software is affected by an out-of-bounds write issue. Successful exploitation of this issue could allow an attacker to execute...

PT-2026-7383

Name of the Vulnerable Software and Affected Versions Adobe InDesign versions 21.1 and earlier Adobe InDesign version 20.5.1 and earlier Description The Adobe InDesign software contains a flaw related to reading beyond the boundaries of allocated memory. Successful exploitation of this issue coul...

PT-2026-7390

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 15.1.0 and earlier Description The software for 3D model texturing, Adobe Substance 3D Designer, has an out-of-bounds read issue in memory. Successful exploitation could allow an attacker to disclose sensitive...

PT-2026-7384

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 15.1.0 and earlier Description The software for 3D model texturing, Adobe Substance 3D Designer, contains an out-of-bounds write issue in memory. Successful exploitation requires a user to open a specially craft...

PT-2026-7313

Name of the Vulnerable Software and Affected Versions Intel Quick Assist Technology affected versions not specified Description A missing protection mechanism for an alternate hardware interface within Ring 0 may allow an escalation of privilege. A system software adversary with privileged user...

PT-2026-7369

Name of the Vulnerable Software and Affected Versions Audition versions 25.3 and earlier Description Audition versions 25.3 and earlier are susceptible to an out-of-bounds read issue, potentially leading to memory exposure. Successful exploitation could allow an attacker to disclose sensitive...

PT-2026-7370

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description The software contains an out-of-bounds write issue that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to open a special...

PT-2026-7299

Name of the Vulnerable Software and Affected Versions IntelR Processor Family affected versions not specified Description An issue involving improper handling of values in the microcode flow may allow for escalation of privilege. A local attacker with a privileged user account, high attack...

PT-2026-7430

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2410 and earlier Description DNG SDK versions 1.7.1 2410 and earlier are subject to an Integer Overflow or Wraparound condition. This can result in application denial-of-service, potentially causing the application to...

PT-2026-7428

Name of the Vulnerable Software and Affected Versions DNG SDK versions prior to 1.7.1 2410 Description An out-of-bounds write issue exists, which occurs when data is written outside the intended boundary of a buffer. This can lead to arbitrary code execution within the context of the current user...

PT-2026-7429

Name of the Vulnerable Software and Affected Versions DNG SDK versions prior to 1.7.1 2410 Description An integer overflow or wraparound occurs when the software processes a specially crafted file. This issue can lead to arbitrary code execution within the context of the current user and requires...

PT-2026-7285

Name of the Vulnerable Software and Affected Versions Server Firmware Update UtilitySysFwUpdt versions prior to 16.0.12 Description A flaw exists in the input validation process of the Server Firmware Update UtilitySysFwUpdt within Ring 3: User Applications. This issue could allow a system softwa...

fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow

A flaw was found in FontForge. A remote attacker could exploit a heap-based buffer overflow vulnerability during SFD file parsing. This issue arises from insufficient validation of user-supplied data length before copying it to a buffer. Successful exploitation requires user interaction, such as...

fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing

A flaw was found in FontForge. This use-after-free vulnerability, occurring during the parsing of SFD Spline Font Database files, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a specially crafted malicious file or visiting a...

fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow

A flaw was found in FontForge. A remote attacker could exploit a heap-based buffer overflow vulnerability during SFD file parsing. This issue arises from insufficient validation of user-supplied data length before copying it to a buffer. Successful exploitation requires user interaction, such as...

Cisco TelePresence Collaboration Endpoint Software and RoomOS Software DoS (cisco-sa-tce-roomos-dos-9V9jrC2q)

According to its self-reported version, Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service is affected by a vulnerability. - A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software cou...

EUVD-2026-5529

In vpummap of vpuioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0106

In vpummap of vpuioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20985

Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...