CVE-2026-47919 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

MINI-F4F6-JFVR-JQ67

Bulletin has no description...

EUVD-2026-35802

Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34708

InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Reconstructing AI activity in investigations

AI systems are now part of everyday work. Investigators need a consistent way to reconstruct what happened within them. Security teams are already investigating activity involving Microsoft 365 Copilot and Azure AI services—from prompt injection attempts to unexpected data access. Those signals a...

Reconstructing AI activity in investigations

AI systems are now part of everyday work. Investigators need a consistent way to reconstruct what happened within them. Security teams are already investigating activity involving Microsoft 365 Copilot and Azure AI services—from prompt injection attempts to unexpected data access. Those signals a...

ECHO-3061-28AE-9642

Bulletin has no description...

ECHO-E156-2AAA-B217

Bulletin has no description...

CVE-2026-47901

Logseq is vulnerable to a sandbox escape flaw where plugins running in sandboxed iframes can inject arbitrary HTML attributes, such as event handlers, into their container element in the host DOM. Due to a disabled Content Security Policy CSP, this allows a malicious plugin to execute arbitrary...

CVE-2026-47901 Iframe escape by plugins in Logseq

Logseq is vulnerable to a sandbox escape flaw where plugins running in sandboxed iframes can inject arbitrary HTML attributes, such as event handlers, into their container element in the host DOM. Due to a disabled Content Security Policy CSP, this allows a malicious plugin to execute arbitrary...

CVE-2026-47901

CVE-2026-47901 affects Logseq. The issue is a sandbox escape: plugins running in sandboxed iframes can inject arbitrary HTML attributes (including event handlers) into the host DOM container. A disabled Content Security Policy (CSP) enables a malicious plugin to execute arbitrary JavaScript in th...

The Hidden Security Risk in Modern Networks: The Work Between Tools

Organizations have more visibility than ever. Growing tech stacks provide greater coverage, and network security teams are increasingly adopting AI and automation to help with routine tasks and reduce manual effort. But the same challenges persist. Outages still last hours, causing significant...

MINI-JQVF-59FJ-565H

Bulletin has no description...

org.springframework:spring-aop (2.0-m1), org.springframework:spring-beans (2.0-m1) +13 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.0-m1)

org.springframework:spring-core MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m1 - org.springframework:spring-beans 2.0-m1 -...

org.springframework:spring-aop (1.2.1), org.springframework:spring-beans (1.2.1) +10 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (1.2.1)

org.springframework:spring-core MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.1 - org.springframework:spring-beans 1.2.1 -...

org.springframework:spring-aop (1.2.4), org.springframework:spring-beans (1.2.4) +10 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (1.2.4)

org.springframework:spring-core MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.4 - org.springframework:spring-beans 1.2.4 -...

org.springframework:spring-aop (1.2.2), org.springframework:spring-beans (1.2.2) +10 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (1.2.2)

org.springframework:spring-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-beans 1.2.2 -...

org.springframework:spring-aop (2.0-m4), org.springframework:spring-beans (2.0-m4) +7 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.0-m4)

org.springframework:spring-core MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-beans 2.0-m4 -...

org.jasig.service:person-directory (1.0.1), org.jasig:person-directory (1.0.0) +26 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.0.3)

org.springframework:spring-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.jasig.service:person-directory 1.0.1 - org.jasig:person-directory 1.0.0 -...

CVE-2026-41720

Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password. Affected versions: Spring LDAP 2.4.0 through 2.4.4; 3.2.0 through 3.2.17; 3.3.0 through 3.3.7; 4.0.0 through 4.0.3...