PT-2026-120819

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description An issue exists in the PILfont text-width accumulation within src/ imaging.c where positive glyph advances are checked against INT MAX, but negative advances are not checked against INT MIN. Repeatin...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge BFCache Data Compromise

The BFCache component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Import component of Google Chrome and Microsoft Edge web browsers is related to access control errors. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted file...

Lighthouse Component Protected Information Access

The vulnerability in the Lighthouse component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

BrowserTag Component Protected Information Access

The vulnerability in the BrowserTag component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...

Pillow numeric error vulnerability

Versions of Pillow prior to 13.0.0 contain a numeric error vulnerability. This vulnerability stems from the lack of validation for negative glyph steps when summing the width of PILfont text in src/imaging.c. Repeating signed 16-bit steps of -32768 can lead to integer overflow, potentially...

FreeRDP RDP Channel Process Failure

The vulnerability of the freerdpchannelprocess function in the RDP client FreeRDP is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20261020-73-0038

The vulnerability in freerdp3 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-56657)

In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Avoid WARN for symlink errors Using WARN for showing the error of symlink creations don't give more information than telling that something goes wrong, since the usual code path is a lregister callback from each...

Linux SMB Preauth Hash RCE

The vulnerability in the smb3preauthhashrsp function within the fs/smb/server/smb2pdu.c component of the Linux kernel system is related to synchronization errors when shared resources are utilized. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality,...

EUVD-2026-104012

A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is some unknown functionality of the file App/Home/Controller/VoteController.class.php of the component Vote Handler. This manipulation of the argument...

FreeRDP SCARD_IOCTL Disconnection

The vulnerabilities of the SCARDIOCTLDISCONNECT and SCARDIOCTL TRANSMIT functions in the RDP client FreeRDP are related to synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow an attacker to cause service failures. source-iocs-preserved...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

CVE-2026-112028

A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is some unknown functionality of the file App/Home/Controller/VoteController.class.php of the component Vote Handler. This manipulation of the argument...