PT-2026-24156

The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes coul...

PT-2026-24448

In usim SendMCCMNCIndMsg of usim Registration.c, there is a possible out of bounds write due to memory corruption. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-24493

Time-of-check time-of-use race condition in the WheaERST SMM module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occ...

PT-2026-24504

Name of the Vulnerable Software and Affected Versions Illustrator versions 29.8.4 and earlier Illustrator version 30.1 Description A Heap-based Buffer Overflow vulnerability exists that may allow for arbitrary code execution in the context of the current user. Successful exploitation requires a...

PT-2026-24496

Improper input validation in some UEFI firmware SMM module for the IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local...

PT-2026-24444

In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2026-24490

Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...

PT-2026-24451

In multiple places, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-24383

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.1.2 and earlier Description The software is susceptible to a NULL Pointer Dereference issue, which may result in a denial-of-service condition. Successful exploitation of this issue requires a user to open a...

PT-2026-24385

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.1.2 and earlier Description Substance3D - Painter is affected by an out-of-bounds read issue that may result in memory exposure. An attacker could potentially access sensitive information stored in memory by...

PT-2026-24372

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.1.2 and earlier Description The software is susceptible to a NULL Pointer Dereference issue that may result in a denial-of-service condition. Successful exploitation of this issue requires a user to open a...

PT-2026-24470

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30307 through 25.001.21265 Description Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are susceptible to a Use After Free issue. Successful exploitation of this issue could lead to...

PT-2026-24389

Name of the Vulnerable Software and Affected Versions Premiere Pro versions 25.5 and earlier Description Premiere Pro versions 25.5 and earlier are susceptible to an out-of-bounds read issue when processing a specially crafted file. This could lead to reading beyond the boundaries of allocated...

PT-2026-24553

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4-p16 through 2.4.9-alpha3 Description Adobe Commerce is affected by an Incorrect Authorization issue that could allow a security feature bypass. An attacker could exploit this to gain unauthorized view access to da...

PT-2026-24348

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. A heap-based buffer overflow exists in the CIccCalculatorFunc::InitSelectOp function, triggered by local user...

PT-2026-24452

In EfwApTransport::ProcessRxRing of efw ap transport.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-24445

In mfc handle released buf of mfc core isr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-24366

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2471 and earlier Description The DNG SDK is affected by an Integer Overflow or Wraparound issue that may result in application denial-of-service. An attacker could exploit this to cause the application to crash or become...

PT-2026-24468

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30307 through 25.001.21265 Description A Use After Free issue exists in Acrobat Reader that may allow for arbitrary code execution with the privileges of the current user. Successful exploitation of this issue...

PT-2026-24386

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.1.2 and earlier Description The software is susceptible to a NULL Pointer Dereference issue, potentially leading to a denial-of-service condition. Successful exploitation of this issue requires a user to open ...