USN-8839-1: Atril vulnerabilities

It was discovered that Atril did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to execute arbitrary code. CVE-2026-46529 It was discovered that Atril incorrectly handled certain PDF file...

USN-8838-1: catdoc vulnerabilities

It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. CVE-2024-48877 It was discovered that catdoc had an integer overflow when...

USN-8838-1 catdoc vulnerabilities

It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. CVE-2024-48877 It was discovered that catdoc had an integer overflow when...

USN-8837-1 pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

USN-8837-1: pdfminer vulnerabilities

It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...

EUVD-2026-88314

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...

CVE-2026-96538 WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...

USN-8829-1 plasma-workspace vulnerability

Fabian Vogt discovered that Plasma Workspace did not properly authenticate local clients connecting to the session manager. A local attacker could possibly use this issue to execute arbitrary code as another user...

USN-8829-1: Plasma Workspace vulnerability

Fabian Vogt discovered that Plasma Workspace did not properly authenticate local clients connecting to the session manager. A local attacker could possibly use this issue to execute arbitrary code as another user...

USN-8828-1 dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. CVE-2016-8637 It was discovered that dracut did not...

USN-8828-1: dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. CVE-2016-8637 It was discovered that dracut did not...

glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader

A flaw was found in glibc, specifically within its dynamic loader ld.so. A local attacker can exploit a time-of-check to time-of-use TOCTOU race condition to escalate privileges and execute arbitrary code. This occurs when the dynamic loader expands $ORIGIN in DTRPATH for setuid/setgid programs,...

CVE-2026-100230

A flaw was found in Input Leap. When the drag-and-drop file transfer feature is enabled, a connected peer can exploit improper path validation to perform directory traversal. By sending a specially crafted file transfer message, an attacker can write arbitrary files outside the intended destinati...

CVE-2026-100310

A flaw was found in libextractor. When executed by privileged applications, such as those running with elevated set user ID setuid permissions, the library loads plugins from an untrusted search path defined by the LIBEXTRACTORPREFIX environment variable without verifying caller privileges. A loc...

USN-8836-1 freerdp3 vulnerabilities

It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code...

USN-8836-1: FreeRDP vulnerabilities

It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code...

vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

A flaw was found in Vim, an open-source command-line text editor. The PHP omni-completion script improperly handles specially crafted input. When a victim opens a malicious PHP file and invokes omni-completion, an unescaped class or trait name can be interpreted as Ex commands. This allows a remo...

vim: Vim: Arbitrary code execution via crafted step-definition patterns

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...