PT-2026-93172

Name of the Vulnerable Software and Affected Versions @zereight/mcp-gitlab versions prior to 2.1.27 Description When the SSE transport mode is enabled via SSE=true, all Model Context Protocol MCP tools are exposed without authentication. This is the default configuration for Docker deployments. A...

PT-2026-93151

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Improper state validation in Skia allows a remote attacker who has compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. Skia is a 2D graphic...

PT-2026-92476

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.16 Thunderbird versions prior to 153.3 Thunderbird versions prior to 156 Description A malicious or compromised IMAP server can cause a crash in Thunderbird by sending an untagged ' ID' response. This triggers...

PT-2026-92475

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.16 Thunderbird versions prior to 153.3 Thunderbird versions prior to 156 Description An out-of-bounds buffer read can be triggered by a maliciously constructed IMAP line. An out-of-bounds read occurs when the...

PT-2026-92064

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An out-of-bounds read occurs in smartcard response decoders due to a failure to validate ATR length fields against fixed inline arrays. Authenticated RDP clients can trigger this by sending oversize...

PT-2026-92069

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An out-of-bounds read occurs in the rdpdr dump packet function due to a 32-bit unsigned integer wraparound during buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet wit...

PT-2026-92075

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An out-of-bounds read occurs in the func get ep desc function within the URBDRC channel. The issue arises because interface arrays are indexed by position rather than by the protocol field...

Linux Distros Unpatched Vulnerability : CVE-2026-91956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's funcgetepdesc function that indexes interface arrays by position...

Linux Distros Unpatched Vulnerability : CVE-2026-90610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box...

CVE-2026-25826

A vulnerability exists in Keyfactor SignServer versions prior to 7.6.0 . An attacker can set the ATTRIBUTESFILE attribute in PKCS11CryptoToken to a readable file that is not an accepted file. When this occurs, the system throws an error that includes the content of the file within the application...

ROS-20260915-73-0119

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0135

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

PT-2026-92191

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...

PT-2026-91926

Name of the Vulnerable Software and Affected Versions GNOME Shell affected versions not specified Description An issue exists when processing icons from a remote search provider via D-Bus. The system does not validate the declared dimensions of the icon against the actual data buffer size. A...

CVE-2026-91959: Out-of-bounds Read

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious BINDACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...

CVE-2026-91958: Out-of-bounds Read

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...

CVE-2026-50024: Improper Limitation of a Pathname to a Restricted Directory

GitHacker is a tool that restores Git repositories from exposed .git directories. In 1.1.7 and earlier, addheadfiletasks parses an attacker-controlled ref path from .git/HEAD and joins unvalidated path segments onto tempdst/.git/logs/, allowing a malicious server to make GitHacker read an arbitra...

CVE-2026-65831: Improper Privilege Management

ArcadeDB is a Multi-Model DBMS. Prior to 26.7.1, a reader-role user can submit POST /api/v1/command/database with language: js because PolyglotQueryEngine.command, PolyglotQueryEngine.analyze, and PolyglotQueryEngine.registerFunctions do not enforce database-administrator authorization...

CVE-2026-83248: Uncontrolled Resource Consumption

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-56986: Unintended Proxy or Intermediary

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...