CVE-2026-75887

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2026-91803

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

CVE-2026-91803

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader . The root cause is the unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated pri...

CVE-2026-91803 Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

EUVD-2026-85166

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

The vulnerability of the .NET software platform and the Visual Studio Code editor lies in buffer overflows in dynamic memory, which allows attackers to escalate their privileges.

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2026-91803: Uncontrolled Search Path Element

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

The vulnerability of the printing control software in PaperCut MF and PaperCut NG, related to insecure dynamic class loading, allows a violator to execute arbitrary code.

The vulnerability of printing control software in PaperCut MF and PaperCut NG lies in the unsafe dynamic loading of classes, due to the lack of checks to ensure that the loaded classes comply with the list of allowed drivers. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the `NioPathHelper.deserialize` method in the Jackson-Databind library allows a hacker to load arbitrary files.

The vulnerability of the NioPathHelper.deserialize method in the Jackson-Databind library is related to insecure dynamic class loading. Exploiting this vulnerability could allow an attacker to load arbitrary files...

CVE-2026-95818

A flaw was found in glibc, the GNU C Library. A local attacker can exploit a stack-based buffer overflow in the dynamic loader ld.so when a setuid/setgid ATSECURE program's DTRPATH or DTRUNPATH begins with $ORIGIN followed by a null character or a slash. This vulnerability allows the attacker to...

CVE-2026-95818

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...

emba v2.0.4-summer_edition

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

Mobile-Security-Framework-MobSF v4.5.3

Mobile Security Framework MobSF Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis...

PT-2026-96832

Name of the Vulnerable Software and Affected Versions Postiz affected versions not specified Description Postiz uses Math.random instead of a cryptographically secure source to generate security-sensitive credentials. This affects OAuth access tokens, authorization codes, client secrets,...

ROS-20260922-73-0009

The vulnerability in gstreamer1-plugins-bad-free is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260922-73-0110

The vulnerability in the 389-ds-base is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-96840

Name of the Vulnerable Software and Affected Versions glibc versions 2.14 through 2.44 Description A stack-based buffer overflow exists in the dynamic loader ld.so of the GNU C Library. This issue occurs when a setuid/setgid AT SECURE program has a DT RPATH or DT RUNPATH that starts with $ORIGIN...

ROS-20260922-73-0112

The vulnerability in the 389-ds-base is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260922-73-0001

The vulnerability in gstreamer1-plugins-good is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-96830

Name of the Vulnerable Software and Affected Versions glibc versions 2.14 through 2.44 Description A time-of-check to time-of-use TOCTOU race condition exists in the dynamic loader ld.so. This occurs when expanding $ORIGIN in DT RPATH for setuid/setgid AT SECURE programs; the system validates the...