EUVD-2025-210695

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...

CVE-2025-8087

CVE-2025-8087 describes a DLL hijacking vulnerability in AMD Power Design Manager. The issue allows a malicious local attacker to escalate privileges during the uninstallation process, potentially enabling arbitrary code execution. Affected component is AMD Power Design Manager; root cause is DLL...

CVE-2025-8087

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...

CVE-2025-8087

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...

EUVD-2026-56385

Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to execute code over a network...

CVE-2026-73081

CVE-2026-73081 affects Activepieces prior to 0.80.0. The worker’s code-compilation pipeline creates the on-disk path for a Code step from the step name and passes it to a shell-invoked build command. A step name containing shell metacharacters can break out of the intended build invocation, allow...

CVE-2026-73081 Activepieces: Remote Code Execution via Command Injection in Code Step Name

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

CVE-2026-73081 Activepieces: Remote Code Execution via Command Injection in Code Step Name

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

CVE-2026-68132

A flaw was found in the Linux kernel. A deadlock can occur during the emergency thaw process of frozen block devices. This issue arises when the dothawallcallback function attempts to reacquire a lock it already holds exclusively, while also holding another mutex. This deadlock prevents further...

CVE-2026-19160

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an uninitialized use vulnerability by crafting a malicious HTML page. This could lead to the disclosure of sensitive cross-origin data...

CVE-2026-73070 Vim: Stack Buffer Overflow in the Vim Socket Server

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...

MAL-2026-13738 Malicious code in @openzeppelin-5/contracts (npm)

@openzeppelin-5/contracts is a malicious npm package published by npm account mssjeep843 that impersonates OpenZeppelin's @openzeppelin/contracts the v5 line via the look-alike scope @openzeppelin-5, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — onl...

CVE-2026-19176

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

CVE-2026-19161

A flaw was found in Skia in Google Chrome. This uninitialized use vulnerability allows a remote attacker, who has already compromised the renderer process, to craft a malicious HTML page. Successful exploitation can lead to the leakage of sensitive cross-origin data...

CVE-2026-19154

A flaw was found in Skia, a 2D graphics library used in Google Chrome on Android. A remote attacker, who has already compromised the browser's renderer process, could exploit this use-after-free vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially...

CVE-2026-19148

A flaw was found in the GPU component of Google Chrome on Linux. A remote attacker, who has already compromised the renderer process, could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to...

CVE-2026-19137

A flaw was found in Google Chrome on Android. This vulnerability, a use-after-free error in the WebGL component, could be exploited by a remote attacker. After compromising the renderer process, the attacker could craft a malicious HTML page to trigger the flaw. This could potentially lead to a...

CVE-2026-73067

CVE-2026-73067 affects the Tesseract OCR engine. A crafted .traineddata model loaded via TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg to accept an unterminated forward-edge run, leading to SquishedDawg::Load calling num_forward_edges(0) and last_edge reading beyond edges_, which t...

EUVD-2026-56182

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges0 and lastedge in...

CVE-2026-73067 Tesseract: Heap OOB read in the DAWG loader

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges0 and lastedge in...