996649 matches found
PT-2026-88746
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88229
Huge security roundup: Google patches 200 Android vulnerabilities—in particular a Wi-Fi bug CVE-2026-28662 that enables remote code execution. Meanwhile, phishing campaigns leverage browser redirects & fake shops clone real brands at scale. Exposure through extensions, Shadow AI risk, Patel serve...
PT-2026-87982
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
PT-2026-87890
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
PT-2026-87509
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...
UBUNTU-CVE-2026-69522
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution...
ALSA-2026:64807 Important: valkey security, bug fix, and enhancement update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
KB5122871: Windows Server 2025 Security Update (September 2026)
The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
Important: redis security, bug fix, and enhancement update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
PT-2026-87688
We recently used LYNXRAY to independently discover an unauthenticated remote code execution vulnerability affecting certain Windows versions CVE-2026-69732. Unfortunately, MSRC determined that our submission duplicated an earlier report by Seung Chan Kim. Although we narrowly missed the first...
PT-2026-87630
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
PT-2026-88030
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87091
🚨 CRITICAL — CVE-2026-12745 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/HdDXJJRQ5P Ivanti CyberSecurity InfoSec...
PT-2026-87090
🚨 CRITICAL — CVE-2026-12744 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/BqCC52NTwG Ivanti CyberSecurity InfoSec...
ROS-20260908-73-0116
The vulnerability in Vim is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
NewStart CGSL MAIN 7.02 : gstreamer1 Multiple Vulnerabilities (NS-SA-2026-0093)
The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1 packages installed that are affected by multiple vulnerabilities: - GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...
CVE-2026-78971
CVE-2026-78971 affects Halo (a content management system) up to version 2.25.4 . The plugin management feature does not adequately restrict plugin installation or updates, allowing a user to install or update a malicious plugin . This grants an attacker the ability to execute arbitrary commands w...
VulnCheck KEV: CVE-2026-84869
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted...
KB5122878: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2026)
The remote Windows host is missing security update 5122878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5124012: Windows 11 Version 26H1 Security Update (September 2026)
The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...