997005 matches found
PT-2026-88229
Huge security roundup: Google patches 200 Android vulnerabilities—in particular a Wi-Fi bug CVE-2026-28662 that enables remote code execution. Meanwhile, phishing campaigns leverage browser redirects & fake shops clone real brands at scale. Exposure through extensions, Shadow AI risk, Patel serve...
PT-2026-87822
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
UBUNTU-CVE-2026-69522
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution...
PT-2026-88632
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88751
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
PT-2026-87688
We recently used LYNXRAY to independently discover an unauthenticated remote code execution vulnerability affecting certain Windows versions CVE-2026-69732. Unfortunately, MSRC determined that our submission duplicated an earlier report by Seung Chan Kim. Although we narrowly missed the first...
PT-2026-87630
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
PT-2026-87129
Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter. Attackers can inject a malicious class via criteriawithTransforms0class that...
PT-2026-87090
🚨 CRITICAL — CVE-2026-12744 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/BqCC52NTwG Ivanti CyberSecurity InfoSec...
PT-2026-87982
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
PT-2026-88548
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
KB5124012: Windows 11 Version 26H1 Security Update (September 2026)
The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
PT-2026-88240
In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
KB5122878: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2026)
The remote Windows host is missing security update 5122878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
Important: redis security, bug fix, and enhancement update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
RHEL 10 : valkey (RHSA-2026:64796)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64796 advisory. Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists,...
NewStart CGSL MAIN 7.02 : gstreamer1 Multiple Vulnerabilities (NS-SA-2026-0093)
The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1 packages installed that are affected by multiple vulnerabilities: - GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...
PT-2026-88730
Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87091
🚨 CRITICAL — CVE-2026-12745 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/HdDXJJRQ5P Ivanti CyberSecurity InfoSec...