31455 matches found
CVE-2026-104025
PeaZip 11.2.0 and earlier on Windows is vulnerable to a Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas). An attacker can craft an archive with a malicious entry name (e.g., using .. sequences) that, when previewed via the "Preview with... -> Associa...
CVE-2026-104025: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...
PT-2026-114910
Path Traversal CWE-22 in the execute obj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...
Randall Hand Yerase’s TNEF Stream Reader buffer error vulnerability
Randall Hand Yerase’s TNEF Stream Reader 2.1.2 and earlier versions have a buffer error vulnerability. This vulnerability stems from the improper handling of compressed RTF attributes by the MAPIPrint function. After decompression, the RTF files lack the NUL terminator, leading to out-of-bounds...
Copeland XWEB and XWEB Pro Stack-Based Buffer Overflow (CVE-2026-20797)
A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a termination of the program. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Unity Linux 20.1060a / 20.1070a Security Update: bind (UTSA-2026-130087)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130087 advisory. If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof,...
P2Patch: Exploit-Guided Vulnerability Repair
Large language models are increasingly deployed as autonomous agents for automated program repair, patching software vulnerabilities through multi-step reasoning and tool use. Yet these systems typically validate a patch against the same evidence used to construct it -- a static alert, sanitizer...
DEBIAN-CVE-2026-110159
Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-110144
Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-110144
Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-110159
Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-110159
Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-110159
Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-110150
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...
CVE-2026-96920
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83781
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72969
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72934
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...