CVE-2026-20500

A vulnerability exists in the Modem component due to improper input validation , which can lead to a system crash . This flaw results in a local denial of service and requires User execution privileges and user interaction for exploitation. Remediation is available via Patch ID: MOLY01810811 (Iss...

PT-2026-86610

In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132...

VulnCheck KEV: CVE-2026-75650

Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code...

CVE-2026-75650: Improper Neutralization of Special Elements Used in a Template Engine

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

CVE-2026-20518: Out-of-bounds Read

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID:...

PT-2026-86613

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID:...

PT-2026-86597

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197...

PT-2026-86607

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

PT-2026-86612

In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900510; Issue ID: MSV-6781...

CVE-2026-20500: Improper Certificate Validation

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

PT-2026-86596

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022284 advisory. Unity Link Advisory UTSA-2026-022284 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

MozillaFirefox-155.0-1.1 on GA media (moderate)

MozillaFirefox-155.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11677-1 Rating: moderate Cross-References: CVE-2026-84117 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84126 CVE-2026-84127 CVE-2026-84128...

NPM: CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

NPM: CodeWhale: execshellinteract sends LLM-controlled input to a running shell without an approval prompt privilege escalation vulnerability discovered by ? in WordPress Npm codewhale versions = 0.8.41, 0.8.64...

NPM: CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

NPM: CodeWhale: execshellinteract sends LLM-controlled input to a running shell without an approval prompt privilege escalation vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.3.10, 0.8.41...

EUVD-2026-70770

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106455 advisory. GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

PT-2026-86916

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4 through 2.4.9-2026-aug Magento Open Source versions 2.4.4 through 2.4.9-2026-aug Adobe Commerce B2B versions 1.3.3 through 1.5.3-2026-aug Description Adobe Commerce, Magento Open Source, and Adobe Commerce B2B are...

libmsgpack-c2-7.0.2-2.1 on GA media (moderate)

libmsgpack-c2-7.0.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11672-1 Rating: moderate Cross-References: CVE-2026-72854 CVSS scores: CVE-2026-72854 SUSE : 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

CVE-2026-83959

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...