CVE-2026-110858

GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull whose unsafe-option guard inspects only keyword arguments, not the positional refspec. Attackers controlling the refspec can supply --upload-pack= to execute OS commands as the calling process over...

PT-2026-115327

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Description A failure in the Docker Buildx filesystem entitlements protection mechanism allows for remote code execution. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-108440: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108428: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108449: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108451: Numeric Truncation Error

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-115321

Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-108448: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-108430: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108450: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108426: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-115317

Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-108447: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Microsoft .NET Framework (October 2026)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70007 -...

Reliable Multicast Transport Driver Code Execution

The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

QUIC Protocol Code Execution

The vulnerability of the QUIC protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-107815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS...

Microsoft Windows Raw Image Extension < 2.4.36.0 / 2.5.35.0 RCE (October 2026)

The Windows 'Raw Image Extension' app installed on the remote host is prior to 2.4.36.0 2.5.35.0 on Windows 11 versions 21H2 and 26H2. It is, therefore, affected by multiple remote code execution vulnerabilities: - A heap-based buffer overflow vulnerability exists in the losslessjpegloadraw...

Linux Distros Unpatched Vulnerability : CVE-2026-110858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull whose unsafe-option guard inspects only keyword arguments, not...