Important: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing

A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of HDR High Dynamic Range files due to insufficient validation of user-supplied data length. A remote attacker could exploit this by convincing a user to open a specially crafted malicious file,...

CVE-2026-19909

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...

EUVD-2026-58800

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2026-19909 PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2026-19909

Technical details beyond the initial description are not publicly available in the provided connected documents. No concrete information on affected products/versions, root cause specifics, impact scope, or remediation is present. Monitor for updates.

Siemens Solid Edge SE2025 < V225.0 Update 15 / SE2026 < V226.0 Update 7 Multiple Vulnerabilities (SSA-621657)

The version of Siemens Solid Edge installed on the remote Windows host is SE2025 prior to V225.0 Update 15, or SE2026 prior to V226.0 Update 7. It is, therefore, affected by multiple file parsing vulnerabilities: - The affected applications contains an out of bounds read vulnerability while parsi...

CVE-2026-73489 vulnerabilities

Vulnerabilities for packages: yazi...

CVE-2026-73430 vulnerabilities

Vulnerabilities for packages: yazi...

CVE-2026-17573 affecting package hdf5 for versions less than 1.14.6-4

CVE-2026-17573 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...

GHSA-G9HV-X236-4QP3 vulnerabilities

Vulnerabilities for packages: yazi...

CVE-2026-68805

CVE-2026-68805 affects Microsoft Excel (part of Microsoft Office) with a heap-based buffer overflow leading to remote code execution. The connected documents consistently describe it as a heap-based overflow in Excel that enables an attacker to run arbitrary code, with a CVSSv3.1 base score of 7....

CVE-2026-64629

A vulnerability has been identified in Parasolid V38.0 All versions V38.0.235, Parasolid V38.1 All versions V38.1.230. The affected applications contains an out of bounds read vulnerability while parsing specially crafted XT files. This could allow an attacker to execute code in the context of th...

CVE-2026-59700

A vulnerability has been identified in Simcenter Femap All versions V2606.0001. The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process...

CVE-2026-50061

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker ...

CVE-2026-50062

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds read vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in...

CVE-2026-50063

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds read vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in...

CVE-2026-50064

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds write vulnerability while parsing specially crafted PSM files. This could allow an attacker to execute code i...

CVE-2026-64629

A vulnerability has been identified in Parasolid V38.0 All versions V38.0.235, Parasolid V38.1 All versions V38.1.230. The affected applications contains an out of bounds read vulnerability while parsing specially crafted XT files. This could allow an attacker to execute code in the context of th...

CVE-2026-64629

A vulnerability has been identified in Parasolid V38.0 All versions V38.0.235, Parasolid V38.1 All versions V38.1.230. The affected applications contains an out of bounds read vulnerability while parsing specially crafted XT files. This could allow an attacker to execute code in the context of th...