PT-2026-112692

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow occurs in Windows Hyper-V, which allows an authorized attacker to execute code locally. This issue can also enable remote attackers to execute arbitrary...

CVE-2026-70112: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally...

PT-2026-112226

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description A heap-based buffer overflow occurs in Windows Spaceport.sys, which is a memory corruption issue where data exceeds the allocated buffer on the heap. This allows an authorized...

Microsoft Windows: CVE-2026-70112: Windows Spaceport.sys Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally...

CVE-2026-110159: Incorrect Authorization

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-70143: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...

CVE-2026-49483

The Code for IBMi Visual Studio Code extension (prior to version 3.0.1 ) is vulnerable to arbitrary code execution due to a blind check in how it accepts IBMiComponent components. The extension fails to reliably verify component integrity, checking only for the existence of a procedure. This allo...

CVE-2026-21124

A vulnerability exists in the libsimba.heifdec.media.samsung.so component on Samsung Mobile devices. Due to improper input validation when retrieving a cover image, a local attacker could potentially achieve arbitrary code execution . This issue affects versions prior to the SMR Oct-2026 Release ...

CVE-2026-21125: Improper Input Validation

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

CVE-2026-21124: Improper Input Validation

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

CLEANSTART-2026-SR22439 Downloading and building modules with malicious version strings can cause local code execution

Security vulnerability affects the victoria-metrics package. Downloading and building modules with malicious version strings can cause local code execution...

CVE-2026-107732

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink dispatches its CmdExec command and can...

EUVD-2026-95210

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-93699

Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server...

CVE-2026-107782: Incorrect Authorization

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-14991: Out-of-bounds Write

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

EUVD-2026-93868

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user...

CVE-2026-59347

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware...

Linux Distros Unpatched Vulnerability : CVE-2026-106279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process ...

Linux Distros Unpatched Vulnerability : CVE-2026-106186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute...