Arbitrary Code Injection

Overview dataclasses-avroschema is a Generate Avro Schemas from Python classes. Serialize/Deserialize python instances with avro schemas Affected versions of this package are vulnerable to Arbitrary Code Injection via the PydanticFieldRepresentation.addfieldproperties function. An attacker can...

Arbitrary Code Injection

Overview dataclasses-avroschema is a Generate Avro Schemas from Python classes. Serialize/Deserialize python instances with avro schemas Affected versions of this package are vulnerable to Arbitrary Code Injection via the parseenum or rendersymbols process. An attacker can execute arbitrary code ...

CVE-2026-86063 Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning

Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Gi...

vulnerabilities handled in Microsoft Developer Tools

Microsoft has identified vulnerabilities in various components of the Developer Tools, such as .NET and Visual Studio. Malicious actors can exploit these vulnerabilities, resulting in damages as described in the tables below. .NET: |------------------|------|-------------------------------------|...

Vulnerabilities in Microsoft Dynamics

Microsoft has addressed vulnerabilities in various Dynamics components. A malicious individual could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the following tables: Microsoft Dataverse: | CVE-ID | CVSS | Impact | |--------|------|---------| |...

CVE-2026-110228 wallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import Upload

wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocket HTML, Pocket CSV or Shaarli import. Attackers can upload an HTML file with script but no anchor elements, leaving it at the...

Vulnerabilities in Microsoft Windows

Microsoft has identified 1,159 vulnerabilities in Windows. It is too complex to list every vulnerability individually. The 53 most severe vulnerabilities, with a CVSS score of 9 or higher, are listed below. These vulnerabilities give malicious actors the ability to impersonate other users, gain...

CVE-2026-109740

A flaw was found in Firefox. Incorrect boundary condition handling in the Win32 widget component allows an attacker to escape the browser's restricted sandbox environment. An attacker who has compromised a sandboxed content process could exploit this vulnerability to achieve privilege escalation...

vulnerabilities present in Microsoft Office

Microsoft has fixed xxx vulnerabilities in various Office products, such as Word, Excel, Access, Outlook, Visio, SharePoint, and PowerPoint, as well as subcomponents like Shell, Azure Key Vault, and Click-to-Run. A malicious actor could exploit these vulnerabilities to cause a denial-of, gain...

CVE-2026-104340

Adobe FrameMaker is affected by a Heap-based Buffer Overflow vulnerability (CWE-122) that could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction, specifically the opening of a malicious file. Adobe has released a...

CVE-2026-106625 Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104342 Adobe Framemaker | Use After Free (CWE-416)

Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104341

Adobe FrameMaker is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically when a victim opens a malicious file . Adobe has released a priority 3 security updat...

CVE-2026-104342

Adobe FrameMaker is affected by a Use After Free vulnerability (CWE-416) that could lead to arbitrary code execution within the context of the current user. Exploitation requires user interaction, specifically the opening of a malicious file. Adobe has released a security update to address this a...

CVE-2026-104341 Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104344 Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104344

Adobe FrameMaker is affected by a Heap-based Buffer Overflow vulnerability (CWE-122) that could lead to arbitrary code execution within the context of the current user. Exploitation of this issue requires user interaction , specifically by a victim opening a malicious file. Adobe has released a p...

CVE-2026-103967

Adobe Framemaker is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically the victim opening a malicious file. No sp...

CVE-2026-103967 Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Vulnerabilities in Microsoft SQL Server

Microsoft has identified vulnerabilities in SQL Server. Malicious actors could exploit these vulnerabilities to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. Microsoft has provided updates that address these...