PT-2026-144864

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.56.1 Git versions prior to 2.50.2 Git versions prior to 2.51.3 Git versions prior to 2.52.1 Git versions prior to 2.53.1 Git versions prior to 2.54.1 Git versions prior to 2.55.1 Description An index integer truncation...

Google Chromium Use-After-Free Vulnerability

Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to,...

Improper neutralization of argument delimiters in a command

An Improper Neutralization of Argument Delimiters in a Command 'Argument Injection'CWE-88 vulnerability in FortiManager,FortiAnalyzer, FortiManager Cloud, FortiAnalyzer Cloud may allow an authenticated privileged admin user to execute unauthorized code or commands...

Improper control of generation of code in GUI

An Improper Control of Generation of Code 'Code Injection' vulnerability CWE-94 and a Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability CWE-120 in FortiManager, FortiAnalyzer, FortiManager Cloud, and FortiAnalyzer Cloud may allow a remote authenticated attacker to...

APSB26-103 : Security update available for Adobe Media Encoder

Adobe has released a priority 3 security update for Adobe Media Encoder. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in...

PT-2026-143418

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-144109

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-143772

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-144125

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network...

PT-2026-143776

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-143969

Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-143775

Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-143495

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-141250

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Knowledge Management XML Forms affected versions not specified Description SAP NetWeaver Knowledge Management, specifically the XML Forms component, does not sufficiently restrict the selection of XSL transformations. This allows...

PT-2026-143762

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Drupal 7.58 Authenticated Remote Code Execution

Drupal versions 7.0 through 7.58 contain an authenticated remote code execution vulnerability through the destination parameter on confirm forms. https://packetstorm.news/download/240252...

APSB26-189 : Security update available for Adobe Experience Manager

Adobe has released a priority 2 security update for Adobe Experience Manager. This update addresses vulnerabilities rated critical and medium that could result in arbitrary code execution, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild for any of...

PT-2026-143488

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-141263

SAP Host Agent does not sufficiently validate certain inputs. Under certain condition, an attacker with low privileges could abuse the affected functionality to influence an internal component into loading a malicious file under a privileged account. Successful exploitation could lead to persiste...

PT-2026-144587

Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the QVM to cause memory corruption, information disclosure or a crash of the QVM...