PT-2026-3176

Name of the Vulnerable Software and Affected Versions Dup Scout version 13.5.28 Description The software contains an unquoted service path issue in its Windows service configuration. This allows local attackers to potentially execute arbitrary code. The vulnerable path is located in 'C:Program...

Gogs <= 0.13.3 Multiple Vulnerabilities

According to its self-reported version, the instance of Gogs running on the remote host is prior or equal to 0.13.3. It is, therefore, affected by multiple vulnerabilities, including: - Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. CVE-2025-8110 -...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002640)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002640 advisory. The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modifyuserhwbreakpoint that can result in crash and possibly memory corruption. This atta...

CVE-2026-20955

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-20946

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-20944

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-20951

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

CVE-2026-20922

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-20948

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-20957

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-20837

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally...

CVE-2026-20943

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-20950

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-20952

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-20840

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-20956

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2023-54331

Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the OutlineService executable to inject malicious code that will be executed with...

CVE-2022-50928

BlueSoleilCS 5.4.277 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in 'C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe' to inject...

CVE-2022-50928

BlueSoleilCS 5.4.277 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in 'C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe' to inject...

CVE-2022-50808

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system...