CVE-2026-103824: NULL Pointer Dereference

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...

CVE-2026-103828: NULL Pointer Dereference

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...

UBUNTU-CVE-2026-107818

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

Fortinet FortiManager Multiple Arbitrary File Read/Write via SQLi (FG-IR-26-178)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-178 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...

Cisco License On-Prem Web Interface Arbitrary File Write DoS

The vulnerability in the web interface for managing Cisco License On-Prem previously known as Cisco Smart Software Manager On-Prem is related to deficiencies in the processing of relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files or caus...

LUA File Virtualization Filter Driver Privilege Escalation

The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

dockerd Go-Archive Arbitrary File Write

The vulnerability of the dockerd daemon in the Go-Archive library of the Docker Desktop command-line interface for developing and deploying container applications, as well as the Docker Compose tool for managing multi-container applications, is related to an incorrect definition of symbolic...

APSB26-144 : Security update available for Adobe ColdFusion

Adobe has released a priority 2 security update for Adobe ColdFusion. This update addresses vulnerabilities rated critical, high, and medium that could result in arbitrary code execution, security feature bypass, arbitrary file system write, privilege escalation, arbitrary file system read,...

APSB26-163 : Security update available for Adobe Content Credentials SDK

Adobe has released a priority 3 security update for Adobe Content Credentials SDK. This update addresses vulnerabilities rated high and medium that could result in security feature bypass, application denial-of-service, and arbitrary file system write. Adobe is not aware of any exploits in the wi...

PT-2026-112759

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Encrypting File System EFS, which is a feature that provides file-level encryption. This flaw allows an authorize...

CVE-2026-103829: NULL Pointer Dereference

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...

PT-2026-113529

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended...

CVE-2026-104348: Heap-based Buffer Overflow

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-105896: NULL Pointer Dereference

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

Microsoft Windows: CVE-2026-69675: Windows Network File System Information Disclosure Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-102218: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-102186: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-102215: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Mozilla Thunderbird < 158.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 158.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-109 advisory. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1...

Mozilla Thunderbird < 158.0

The version of Thunderbird installed on the remote Windows host is prior to 158.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-109 advisory. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1. CVE-2026-10601...