vulnerabilities present in Microsoft Office

Microsoft has uncovered vulnerabilities in various Office products, such as Word, Excel, PowerPoint, and SharePoint. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. For successful exploitation, the...

CVE-2026-16461

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump short mode used by rpcinfo -s, version numbers from a remote RPCBPROCDUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs rpcinfo -s against a malicious or...

Malicious code in react-tabulix-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4338419bb73e69db7de001f3d27b86c8890a0ba3ace3bfa60e09552d1be3ad9c [email protected] declares a preinstall lifecycle hook that runs dist/index.d.js. That file base64-decodes an embedded blob and passes the...

MAL-2026-10987 Malicious code in react-tabulix-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4338419bb73e69db7de001f3d27b86c8890a0ba3ace3bfa60e09552d1be3ad9c [email protected] declares a preinstall lifecycle hook that runs dist/index.d.js. That file base64-decodes an embedded blob and passes the...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

SUSE-SU-2026:22650-1 Security update for helm

This update for helm fixes the following issue - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens bsc1270127. Changes for helm: - Update to version 3.21.2...

Malicious code in reimagined-broccoli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b417d0787324aa952fe69c59b47f6bea108ab02fd20241a6597c2ee0e6f3d8 The package reimagined-broccoli ships a benign-looking stub at reimaginedbroccoli/main.py that only prints a success message. The tarball also ships...

MAL-2026-10978 Malicious code in reimagined-broccoli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b417d0787324aa952fe69c59b47f6bea108ab02fd20241a6597c2ee0e6f3d8 The package reimagined-broccoli ships a benign-looking stub at reimaginedbroccoli/main.py that only prints a success message. The tarball also ships...

Malicious code in lebinfmt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eaa5c1d1ed763b9e392bd199c360d75b25531b287de9f224e5626e121d649d4 Analysis of lebinfmt 1.0.0 surfaced no behaviors matching supply-chain attack classes. No install-time or import-time network I/O, no credential or...

MAL-2026-10976 Malicious code in colorstack (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f3b08a41e5239924e109a14b8d91b4542bbbdddb1138a1bc6c9cfb7137b053 The package publishes as 'colorstack' with a summary advertising a color/gradient library, but installs under the import name 'newcolors' and exposes...

CVE-2026-26197

A flaw was found in HDF5, a high-performance library and file format specification. A remote attacker can exploit this vulnerability by providing a maliciously altered HDF5 file. If the file's array datatype has inconsistent size, element count, or element size, it can trigger an out-of-bounds...

Malicious code in rasterkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115c87298c4a239bd4954e39a155929c2480510343aefe1fa7c0b631b467af6b The rasterkit 1.0.2 distribution installs its modules under the top-level PIL/ package name owned by Pillow. toplevel.txt declares PIL and the wheel'...

MAL-2026-10974 Malicious code in rasterkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115c87298c4a239bd4954e39a155929c2480510343aefe1fa7c0b631b467af6b The rasterkit 1.0.2 distribution installs its modules under the top-level PIL/ package name owned by Pillow. toplevel.txt declares PIL and the wheel'...

Malicious code in fluffy-octo-broccoli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b017d48fb884ba615e0b62dfd421f8fe24e52695a7ae86c8c158eb2ded44286f fluffy-octo-broccoli ships a 10.7 MB qiwi.zip archive whose contents yield no readable filenames or strings via extraction, alongside a run.sh that...

MAL-2026-10973 Malicious code in fluffy-octo-broccoli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b017d48fb884ba615e0b62dfd421f8fe24e52695a7ae86c8c158eb2ded44286f fluffy-octo-broccoli ships a 10.7 MB qiwi.zip archive whose contents yield no readable filenames or strings via extraction, alongside a run.sh that...

Malicious code in commonweb-rewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741bb412733dcbcc7aac51796dd6e3b0a6b86439c4886aad1b0418959051d0b3 commonweb-rewards ships an empty index.js and declares a single dependency ltidisafe whose version spec is a direct URL to a tarball on a non-publish...

MAL-2026-10968 Malicious code in commonweb-rewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741bb412733dcbcc7aac51796dd6e3b0a6b86439c4886aad1b0418959051d0b3 commonweb-rewards ships an empty index.js and declares a single dependency ltidisafe whose version spec is a direct URL to a tarball on a non-publish...

MAL-2026-10970 Malicious code in consumerweb-calurls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669d269ba4f32fdf1b9c8858544848525f323074fba69e9f84a2974504adfc17 [email protected] ships an effectively empty package empty index.js, no lifecycle scripts whose sole effect on install is to resolve a runti...

Malicious code in consumerweb-calurls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669d269ba4f32fdf1b9c8858544848525f323074fba69e9f84a2974504adfc17 [email protected] ships an effectively empty package empty index.js, no lifecycle scripts whose sole effect on install is to resolve a runti...

Malicious code in commonweb-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be45f481316bef278d1accb9df9fb9e30f5789c2c783c749c7f8903868130a71 [email protected] ships an effectively empty main module index.js exports an empty object and its package.json declares a dependency 'ltidisafe'...