PT-2026-7387

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 15.1.0 and earlier Description The software for 3D model texturing, Substance 3D Designer, has an Out-of-bounds Read issue that may result in memory exposure. An attacker could potentially access sensitive...

PT-2026-7367

Name of the Vulnerable Software and Affected Versions Audition versions 25.3 and earlier Description Audition versions 25.3 and earlier are subject to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to gain access to sensitive information stored...

Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service...

PT-2026-7467

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler versions 1.22.5 and earlier Description Substance3D - Modeler versions 1.22.5 and earlier contain an out-of-bounds read issue that may result in memory exposure. A malicious file crafted to exploit this issue requires use...

CVE-2026-21319: Out-of-bounds Read

After Effects versions 25.6 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim mus...

ALSA-2026:2422 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service...

ALSA-2026:2420 Important: nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service...

ALSA-2026:2421 Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service...

Important: nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service...

Adobe Audition < 25.6 Multiple Vulnerabilities (APSB26-14) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 25.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-14 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory exposure CVE-2026-21313, CVE-2026-21314, CVE-2026-21315,...

APSB26-17 : Security Update Available for Adobe InDesign

Adobe has released a security update for Adobe InDesign. This update addresses critical and important vulnerabilities that could lead to memory exposure, arbitrary code execution, and application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in...

APSB26-22 : Security updates available for Substance 3D Modeler

Adobe has released an update for Adobe Substance 3D Modeler. This update addresses an important vulnerability in Adobe Substance 3D Modeler. Successful exploitation could lead to memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

APSB26-19 : Security updates available for Substance 3D Designer

Adobe has released an update for Adobe Substance 3D Designer that addresses critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution, application denial-of-service, and memory exposure in the context of the current user. Adobe is not aware of any...

APSB26-23 : Security update available for Adobe DNG Software Development Kit (SDK)

Adobe has released an update for the Adobe DNG Software Development Kit SDK for Windows and macOS. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure, or application denial-of-service. Adobe is not aware of any exploits in t...

PT-2026-7390

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 15.1.0 and earlier Description The software for 3D model texturing, Adobe Substance 3D Designer, has an out-of-bounds read issue in memory. Successful exploitation could allow an attacker to disclose sensitive...

nodejs24 security update

An update is available for nodejs24. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a platform built on Chrome's JavaScript runtime for easily...

RLSA-2026:1843 Important: nodejs22 security update

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

nodejs22 security update

An update is available for nodejs22. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a platform built on Chrome's JavaScript runtime \ for easily...

RLSA-2026:1842 Important: nodejs24 security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

RockyLinux 10 : nodejs24 (RLSA-2026:1842)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:1842 advisory. nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service...