342429 matches found
CVE-2026-48397
CVE-2026-48397 affects Lightroom Classic and involves a Deserialization of Untrusted Data vulnerability that could enable arbitrary code execution in the context of the current user. The underlying issue is triggered when a user opens a malicious file, requiring user interaction. The attack surfa...
CVE-2026-48407
Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file, per the CVE description. The CVSS vector indicates a local attack with low attack complexity and user ...
CVE-2026-48404
Lightroom Classic is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The CVSSv3.1 score is 7.8 (High) with Local attack vector,...
CVE-2026-48404 Lightroom Classic | Out-of-bounds Write (CWE-787)
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-48410 Lightroom Classic | Out-of-bounds Write (CWE-787)
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-48410 Lightroom Classic | Out-of-bounds Write (CWE-787)
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-48410
CVE-2026-48410 : Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The description does not specify affected versions or pa...
CVE-2026-47940 Lightroom Classic | Integer Overflow or Wraparound (CWE-190)
Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-47940
CVE-2026-47940 affects Lightroom Classic. The issue is an Integer Overflow/Wraparound in a component used by Lightroom Classic that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSS 3.1 sc...
CVE-2026-65795
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-62890
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...
CVE-2026-28707
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...
CVE-2026-20765
Incorrect comparison for some IntelR TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentiall...
UBUNTU-CVE-2026-20707
Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...
EUVD-2026-56712
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2026-56661
Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...
CVE-2026-61349
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59131
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...