632271 matches found
PT-2026-88301
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-87477
A newly disclosed Windows BitLocker vulnerability CVE-2026-69449 could let attackers execute arbitrary code via local or network paths. Affected versions span Windows 10, Windows 11, and all recent Windows Server releases. Microsoft rates the risk “Important” yet “Exploitation Less Likely,” and h...
EulerOS 2.0 SP12 : libXfont2 (EulerOS-SA-2026-3347)
According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client...
EulerOS 2.0 SP12 : sqlite (EulerOS-SA-2026-3388)
According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...
KB5122876: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2026)
The remote Windows host is missing security update 5122876. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141)
The version of Adobe Reader installed on the remote Windows host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2026-81992 - Incorrect Authorization CWE-863...
Adobe Illustrator < 29.8.11 / 30.0 < 30.8 Multiple Arbitrary code execution (APSB26-131)
The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.11, 30.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-131 advisory. - Out-of-bounds Write CWE-787 potentially leading to Arbitrary code execution CVE-2026-75992 - Improper...
ROS-20260908-73-0112
The vulnerability in Vim is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-88023
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
RHEL 9 : libyang (RHSA-2026:65477)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:65477 advisory. Libyang is YANG data modeling language parser and toolkit written and providing API in C. Security Fixes: libyang: libyang: Denial of Service or...
Security Updates for Microsoft SharePoint Server Subscription Edition (September 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
NewStart CGSL MAIN 7.02 : git Vulnerability (NS-SA-2026-0105)
The remote NewStart CGSL host, running version MAIN 7.02, has git packages installed that are affected by a vulnerability: - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When...
AlmaLinux 8 : redis:6 (ALSA-2026:64823)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64823 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...
Important: redis:6 security update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
Moderate: expat security update
Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...
PT-2026-87686
🚨Critical - Windows DNS Server Remote Code Execution via Use-After-Free CVE-2026-69730 A use-after-free in the Windows DNS Server service DNS.exe can be triggered remotely by sending crafted DNS requests over the network, corrupting memory and leading to arbitrary code execution as SYSTEM...
ALSA-2026:64812 Moderate: expat security update
Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...
ALSA-2026:64810 Moderate: expat security update
Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...
KLA91265 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...
