PT-2026-88022

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-87568

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...

PT-2026-88007

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

PT-2026-87814

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

ROS-20260908-73-0028

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

EulerOS 2.0 SP12 : nmap (EulerOS-SA-2026-3287)

According to the versions of the nmap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdataprimitive libnetutil/netutil.cc, so the...

ROS-20260908-73-0103

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their permitted limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

EulerOS 2.0 SP12 : bzip2 (EulerOS-SA-2026-3250)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

NewStart CGSL MAIN 7.02 : gpsd Multiple Vulnerabilities (NS-SA-2026-0106)

The remote NewStart CGSL host, running version MAIN 7.02, has gpsd packages installed that are affected by multiple vulnerabilities: - An integer underflow vulnerability exists in the nextstate function in gpsd/packet.c of gpsd versions prior to commit ffa1d6f40bca0b035fc7f5e563160ebb67199da7. Wh...

Adobe Acrobat < 24.001.30429 / 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 24.001.30429 or 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

EulerOS 2.0 SP12 : python-pillow (EulerOS-SA-2026-3300)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when giv...

NewStart CGSL MAIN 7.02 : xpdf Multiple Vulnerabilities (NS-SA-2026-0109)

The remote NewStart CGSL host, running version MAIN 7.02, has xpdf packages installed that are affected by multiple vulnerabilities: - In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes ...

EulerOS 2.0 SP12 : graphite2 (EulerOS-SA-2026-3340)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

NewStart CGSL MAIN 7.02 : libsoup3 Vulnerability (NS-SA-2026-0089)

The remote NewStart CGSL host, running version MAIN 7.02, has libsoup3 packages installed that are affected by a vulnerability: - A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing...

VulnCheck KEV: CVE-2026-87491

Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...

PT-2026-87516

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

PT-2026-87525

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

PT-2026-87546

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-88074

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

PT-2026-88263

In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...