Graphic Fonts Windows Code Execution

The vulnerability of the Graphic Fonts component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome Downloads Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

FluentRender Code Execution

The vulnerability of the FluentRender component of the logging-operator data collector module related to Fluentd involves incorrect elimination of certain elements in the output data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Cisco License On-Prem Unauthorized Access

The vulnerability in the web interface for managing Cisco License On-Prem previously known as Cisco Smart Software Manager On-Prem is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

Cisco Application Policy Infrastructure Controller Web Interface Command Execution

The vulnerability of the Cisco Application Policy Infrastructure Controller APIC web interface management interface is related to the lack of a standardized mechanism for error handling. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

SUSE SLED15: libunbound8 / unbound / unbound-anchor / unbound-devel / etc (SUSE-SU-2026:4620-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4620-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEM...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Pillow vulnerability (USN-8690-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8690-1 advisory. It was discovered that Pillow did not properly manage memory when processing certain image files. An attacker could possibly u...

Office Online Package ONLYOFFICE Docs Path Traversal

The vulnerability of the office online package ONLYOFFICE Docs DocumentServer is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Cisco License On-Prem Arbitrary Command Execution

The vulnerability in the web interface for managing Cisco License On-Prem previously known as Cisco Smart Software Manager On-Prem is related to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : c3p0 vulnerabilities (USN-8642-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8642-1 advisory. It was discovered that c3p0 was vulnerable to remote code execution via maliciously crafted serialized...

PT-2026-112715

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An unauthorized attacker can disclose information over a network due to the use of an uninitialized resource within the Windows Routing and Remote Acces...

Microsoft Windows: CVE-2026-85371: Network Policy Server (NPS) Remote Code Execution Vulnerability

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server: CVE-2026-67625: Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69998: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-97755: Microsoft Office Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-70300: Microsoft Office Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83874: Windows Event Tracing Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85867: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-97749: Microsoft Office Outlook Remote Code Execution Vulnerability

Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...