CVE-2026-87723

Google fuse-archive versions prior to 1.24 are vulnerable to an Untrusted Search Path (PATH Hijacking) . An attacker capable of prepending a directory to the PATH or writing a malicious binary to a writable directory within the PATH can hijack the execution pathway. This vulnerability allows for ...

EUVD-2026-88074

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-100888

A flaw was found in OpenDKIM. A remote attacker can exploit this flaw to cause a Denial of Service DoS or potentially arbitrary code execution by submitting a specially crafted DomainKeys Identified Mail DKIM signature header. In the dkimcanonselecthdrs function, improper processing of the 'h'...

USN-8825-1: Requests vulnerability

It was discovered that Requests did not correctly handle generating random temporary file paths. An attacker could possibly use this issue to execute arbitrary code...

USN-8825-1 requests vulnerability

It was discovered that Requests did not correctly handle generating random temporary file paths. An attacker could possibly use this issue to execute arbitrary code...

PT-2026-99913

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pg file writetext,text,bool, pg file renametext,text,text, pg file unlinktext, and pg logdir ls. These functions are executable by any authenticated...

CVE-2026-82935: Use of Unmaintained Third Party Components

mH-DEVELOPER smart home module ships with an end-of-life, unsupported Debian 8 and Node.js runtime v17.0.1 in its production firmware. This exposes the device to publicly known vulnerabilities that will not receive security patches. An attacker could exploit these known flaws to execute arbitrary...

PT-2026-99867

Name of the Vulnerable Software and Affected Versions mH-DEVELOPER versions prior to 3.0.30 Description The smart home module uses an end-of-life and unsupported Debian 8 operating system and Node.js runtime v17.0.1 in its production firmware. This reliance on obsolete components exposes the devi...

Apple Security Advisory 09-28-2026-2

Apple Security Advisory 09-28-2026-2 - macOS Tahoe 26.7.1 addresses out of bounds write and arbitrary code execution vulnerabilities...

Apple Security Advisory 09-28-2026-1

Apple Security Advisory 09-28-2026-1 - iOS 26.7.1 and iPadOS 26.7.1 addresses out of bounds write and arbitrary code execution vulnerabilities...

VulnCheck KEV: CVE-2026-86950

Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution...

Important: webkitgtk4

Issue Overview: Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High CVE-2026-85049 Affected Packages: webkitgtk4 Note: This advisory is applicable to Amazon...

ROS-20260928-73-0104

The vulnerability of the dounregisterframebuffer function in the Linux operating system’s kernel relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure or execute arbitrary code...

RHEL 8 : postgresql:12 (RHSA-2026:72362)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72362 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. GDCM's command-line tool gdcmxml, which converts between XML and DICOM file formats, is vulnerable to a stack-based buffer overflow ...

Apple Security Advisory 09-28-2026-3

Apple Security Advisory 09-28-2026-3 - macOS Sequoia 15.8.1 addresses out of bounds write and arbitrary code execution vulnerabilities...

ROS-20260928-73-0071

The vulnerability of the procreaddirde function in the Linux operating system is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

About the security content of macOS Tahoe 26.7.1

About the security content of macOS Tahoe 26.7.1 This document describes the security content of macOS Tahoe 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

About the security content of macOS Sequoia 15.8.1

About the security content of macOS Sequoia 15.8.1 This document describes the security content of macOS Sequoia 15.8.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...