MiracleLinux 8 : libyang-1.0.184-2.el8_10.ML.1 (AXSA:2026-777:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-777:01 advisory. libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob CVE-2026-44673 Tenable has extracted the preceding...

CVE-2026-45171: Improper Limitation of a Pathname to a Restricted Directory

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager PSM versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute arbitrary code. CyberArk Security Bulletin: CA26-17 and CA26-1...

Adobe Substance3D Sampler out-of-bound write vulnerability (CNVD-2026-26866)

Adobe Substance3D Sampler is a rendering software for 3D scenes developed by Adobe Inc. Adobe Substance3D Sampler has a out-of-bounds write vulnerability, allowing attackers to execute arbitrary code within the context of the current user...

Adobe InDesign Desktop heap buffer overflow vulnerability (CNVD-2026-24187)

Adobe InDesign Desktop is a professional desktop publishing application, primarily used for page layout design in print and digital media. Adobe InDesign Desktop has a buffer overflow vulnerability that stems from improper handling of malicious files during user interactions. Attackers can exploi...

Microsoft Excel code execution vulnerability (CNVD-2026-24916)

Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is a code execution vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to execute arbitrary code on the system...

The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor involves the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the DHCP Client Service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the DHCP Client Service for Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...

The vulnerability of the Windows operating system’s Remote Desktop Client allows a hacker to execute arbitrary code.

The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor is related to buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability relates to the Azure Kubernetes Service (AKS), which handles the deployment of container applications and their management. It stems from an incorrect path name limitation in the directory structure, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Container Application Deployment and Management service provided by Azure Kubernetes Service AKS is related to an incorrect path name limitation for the catalog. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

CVE-2026-53819: Untrusted Search Path

OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override the Homebrew executable selection. Attackers with access to trusted operator workspaces can execute unintended Homebrew-compatible executables during skill...

PT-2026-48705

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0495 Description A Vimscript code injection exists in the s:NetrwBookHistSave function within the netrw plugin. The issue occurs when serializing browsed directory paths to the history file /.vim/.netrwhist. A directo...

The vulnerability of the Windows operating system’s Remote Desktop Client allows a hacker to execute arbitrary code.

The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Microsoft Office software package, related to a countable loss of significance, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code...

RockyLinux 8 : libyang (RLSA-2026:24545)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:24545 advisory. libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob CVE-2026-44673 Tenable has extracted the preceding...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-11332)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-11332 advisory. - A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency...

Adobe Substance3D Sampler out-of-bound write vulnerability (CNVD-2026-24901)

Adobe Substance3D Sampler is a rendering software for 3D scenes developed by Adobe Inc. Adobe Substance3D Sampler has a out-of-bounds write vulnerability, allowing attackers to execute arbitrary code within the current user environment...

Adobe InDesign Desktop heap buffer overflow vulnerability (CNVD-2026-24188)

Adobe InDesign Desktop is a professional desktop publishing and page layout design software. Adobe InDesign Desktop has a heap buffer overflow vulnerability. This vulnerability arises because the program fails to properly handle data in malicious files. Attackers can exploit this vulnerability by...

Adobe InCopy buffer overflow vulnerability (CNVD-2026-24182)

Adobe InCopy is a professional text editing and typesetting software, primarily used for creating and editing content in collaboration with Adobe InDesign. Adobe InCopy has a security vulnerability that stems from improper handling of malicious files, leading to out-of-bound memory writes...