PT-2026-88545

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Session allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36 or...

PT-2026-88601

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the Passwords component allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36...

CVE-2026-54611: Improper Control of Generation of Code

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

CVE-2026-84000: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally...

CVE-2026-83992: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-83990: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-70145: Out-of-bounds Read

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

PT-2026-87791

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

ALSA-2026:65158 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74934 firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 CVE-2026-74987...

PT-2026-87985

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A stack-based buffer overflow exists in the Microsoft Graphics Component. This flaw allows an unauthorized attacker to execute arbitrary code over a network. A stack-base...

PT-2026-86950

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Message Server affected versions not specified Description SAP NetWeaver Message Server fails to sufficiently validate the authenticity of internal application server components during the registration process. An unauthenticated...

PT-2026-87366

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

PT-2026-87763

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

PT-2026-87521

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

Android XR Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

The XR Security Bulletin contains details of security vulnerabilities affecting the XR platform. The full XR update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage all customers to...

PT-2026-87796

Name of the Vulnerable Software and Affected Versions Windows Imaging Component affected versions not specified Description An out-of-bounds write occurs in the Windows Imaging Component, which allows an unauthorized remote attacker to execute arbitrary code over a network without requiring user...

Wear OS Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage a...

PT-2026-88681

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Payments component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

ROS-20260908-73-0075

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-87014

OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, fr...