CVE-2026-96808

A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...

UBUNTU-CVE-2026-96808

In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...

CVE-2026-96808

Flatpak versions prior to 1.18.1 contain a symlink traversal vulnerability in the revokefs writer component, which is utilized by the flatpak-system-helper to process repository data from unprivileged callers. While the system rejects literal .. components, it fails to prevent traversal via symli...

CVE-2026-96808

In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...

CVE-2026-96808

In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...

CVE-2026-96560

LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pdtransmode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC...

CVE-2026-91799

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution...

CVE-2026-91790

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF...

CVE-2026-91790

Foxit PDF Editor/Reader is vulnerable to a Use-After-Free (UAF) vulnerability during the rendering of page images. The issue stems from a failure to properly validate image objects containing malformed optional content attributes , which leads the application to access an already-freed internal d...

CVE-2026-91790 Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF...

EUVD-2026-85132

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF...

EUVD-2026-85124

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution...

CVE-2026-91799 Foxit Editor/Reader Array resetForm Use-After-Free Vulnerability

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution...

CVE-2026-91799 Foxit Editor/Reader Array resetForm Use-After-Free Vulnerability

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution...

CVE-2026-91799

A use-after-free vulnerability exists in Foxit PDF Editor/Reader due to improper handling of JavaScript array objects . Specifically, the vulnerability occurs during array processing where a specially crafted PDF may cause the application to access a released object. This flaw could potentially l...

CVE-2026-96273

Ghidra versions prior to 12.1.4 are vulnerable to a Denial of Service condition due to a lack of validation of the TYPE_COL byte within the OptionsDB.createUnregisteredOption() function. This flaw triggers an ArrayIndexOutOfBoundsException, resulting in domain objects becoming permanently locked....

CVE-2026-91799: Use After Free

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution...

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2026-97418

Name of the Vulnerable Software and Affected Versions Flatpak versions prior to 1.18.1 Description The revokefs writer, utilized by the flatpak-system-helper to receive repository data from unprivileged callers, fails to prevent symlink traversal despite rejecting literal .. components in file...