CVE-2026-30631

CVE-2026-30631 affects bytebot-ai, with a root cause allowing arbitrary code execution via a crafted path to computer_write_file (commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313, 2025-09-11). The vulnerability is tracked across multiple feeds (NVD, CVE list, CVE records) and has a CVSS v3.1 base ...

Mozilla -- Memory safety bugs

https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/CVE-2026-16360 reports: Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...

PT-2026-61923

Name of the Vulnerable Software and Affected Versions Firefox version 152 Thunderbird version 152 Description Memory safety bugs were identified that showed evidence of memory corruption. These issues could potentially be exploited to execute arbitrary code. Recommendations Update Firefox to...

PT-2026-61924

Name of the Vulnerable Software and Affected Versions Firefox version 152 Firefox ESR version 140.12 Thunderbird version 152 Thunderbird ESR version 140.12 Description Memory safety bugs were identified that showed evidence of memory corruption. These issues could potentially be exploited to...

Security Vulnerabilities fixed in Firefox ESR 115.38 — Mozilla

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough...

Security Vulnerabilities fixed in Firefox ESR 140.13 — Mozilla

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. Memory safety bugs present in Firefox ESR 140.12 and...

CVE-2026-30631

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 2025-09-11 allowing attackers to execute arbitrary code via crafted path to computerwritefile...

PT-2026-63250

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description An inappropriate implementation in the WebAudio component allows a remote attacker to execute arbitrary code within a sandbox by enticing a user to visit a specially crafted HTML page...

Oracle Linux 10 : nginx (ELSA-2026-36364)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36364 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...

Mozilla -- Memory safety bugs

https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/CVE-2026-16411 reports Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...

Security update for vim (important)

openSUSE security update: security update for vim ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21374-1 Rating: important References: bsc1271193 bsc1271194 bsc1271195 Cross-References: CVE-2026-59856 CVE-2026-59857 CVE-2026-59858 CVSS scores:...

PT-2026-62037

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. A remote high-privileged user could exploit these issues to execute arbitrary code as a privileged user on the...

KLA91167 Multiple vulnerabilities in Oracle Java

Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability can be exploited...

Amazon Linux 2 : libtiff, --advisory ALAS2-2026-3823 (ALAS-2026-3823)

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3823 advisory. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compress...

hplip security update

3.23.12-10.5 - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 3.23.12-10.4 - Fix more leaks in hpcups 3.23.12-10.3 - OSH fixes after CVE-2026-8631 3.23.12-10.2 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups 3.23.12-10.1 ...

USN-8558-1 imagemagick vulnerabilities

It was discovered that ImageMagick did not limit mutual references between MVG files. An attacker could possibly use this issue to cause a stack overflow, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.0...

CVE-2026-51385

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...

CVE-2026-48389

The CVE-2026-48389 entry concerns the DNG SDK prior to or equal to version 1.7.1 2536, which is affected by a stack-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The ...

CVE-2026-63826

A flaw was found in the Linux kernel's framebuffer device fbdev component. When the storemodes function replaces a framebuffer's list of display modes, it fails to properly clear old pointers before freeing the old list. This can result in a use-after-free vulnerability, a type of memory...

CVE-2026-64073

A flaw was found in the Linux kernel, specifically within the irqwork subsystem when running on systems configured with PREEMPTRT. This vulnerability is a use-after-free, where the system attempts to access memory after it has been released. A local attacker could exploit this timing issue to cau...