Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Apple Security Advisory 09-28-2026-2

Apple Security Advisory 09-28-2026-2 - macOS Tahoe 26.7.1 addresses out of bounds write and arbitrary code execution vulnerabilities...

ROS-20260928-73-0033

The vulnerability of the ext4xattr inodeupdateref function in the Linux operating system is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Important: gvfs

Issue Overview: A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buff...

ROS-20260928-73-0078

The vulnerability of the tipcmonreinitself function in the Linux operating system’s kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

CVE-2026-82935: Use of Unmaintained Third Party Components

mH-DEVELOPER smart home module ships with an end-of-life, unsupported Debian 8 and Node.js runtime v17.0.1 in its production firmware. This exposes the device to publicly known vulnerabilities that will not receive security patches. An attacker could exploit these known flaws to execute arbitrary...

PT-2026-99867

Name of the Vulnerable Software and Affected Versions mH-DEVELOPER versions prior to 3.0.30 Description The smart home module uses an end-of-life and unsupported Debian 8 operating system and Node.js runtime v17.0.1 in its production firmware. This reliance on obsolete components exposes the devi...

VulnCheck KEV: CVE-2026-86950

Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution...

About the security content of macOS Sequoia 15.8.1

Download JSON About the security content of macOS Sequoia 15.8.1 This document describes the security content of macOS Sequoia 15.8.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of iOS 26.7.1 and iPadOS 26.7.1

Download JSON About the security content of iOS 26.7.1 and iPadOS 26.7.1 This document describes the security content of iOS 26.7.1 and iPadOS 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

RHEL 9 : postgresql (RHSA-2026:72361)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72361 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

RHEL 10 : postgresql16 (RHSA-2026:72282)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72282 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that...

PT-2026-116261

Уязвимость функции system компонента HNAP CGI Handler микропрограммного обеспечения маршрутизатора D-Link DIR-868L связана с непринятием мер по очистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код от имени root...

ROS-20260928-73-0104

The vulnerability of the dounregisterframebuffer function in the Linux operating system’s kernel relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure or execute arbitrary code...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. GDCM's command-line tool gdcmxml, which converts between XML and DICOM file formats, is vulnerable to a stack-based buffer overflow ...

PT-2026-102337

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7.1 iPadOS versions prior to 26.7.1 macOS Sequoia versions prior to 15.8.1 macOS Tahoe versions prior to 26.7.1 Description An out-of-bounds write issue exists in the Apple CoreGraphics framework, which is used across...