PT-2026-87588

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-77495: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

Wear OS Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage a...

PT-2026-109419

Уязвимость фреймворка Windows Imaging Component WIC операционных систем Windows связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

CVE-2026-83990: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

PT-2026-86950

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Message Server affected versions not specified Description SAP NetWeaver Message Server fails to sufficiently validate the authenticity of internal application server components during the registration process. An unauthenticated...

PT-2026-87493

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

PT-2026-87014

OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, fr...

PT-2026-87192

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

PT-2026-87954

Name of the Vulnerable Software and Affected Versions Windows Imaging Component affected versions not specified Description A heap-based buffer overflow occurs in the Windows Imaging Component, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the...

ALSA-2026:65158 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74934 firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 CVE-2026-74987...

PT-2026-87925

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-73016: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

Android Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Source code patches...

PT-2026-87363

Name of the Vulnerable Software and Affected Versions Windows Imaging Component affected versions not specified Description An out-of-bounds read exists in the Windows Imaging Component, which allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment,...

ROS-20260908-73-0077

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

CVE-2026-77493: Double Free

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-69911: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-71376: Improper Neutralization of Special Elements used in an OS Command

OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, fr...

CVE-2026-54611: Improper Control of Generation of Code

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...