CVE-2025-22885

Improper buffer restrictions in the firmware for the TDX Module may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack...

CVE-2025-22453

Improper input validation for some Server Firmware Update UtilitySysFwUpdt before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This...

CVE-2025-22453

Summary: CVE-2025-22453 relates to improper input validation in Intel’s Server Firmware Update Utility (SysFwUpdt) prior to version 16.0.12. The vulnerability could allow a local attacker with privileged user access (high privileges, local attack vector, no user interaction) to escalate privilege...

PT-2026-7377

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 25.6 and earlier Description The software is susceptible to an out-of-bounds read issue when processing a specially designed file. Successful exploitation could allow an attacker to execute code with the privileges...

PT-2026-7392

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 25.6 and earlier Description A Use After Free issue exists in Adobe After Effects that may lead to arbitrary code execution with current user privileges. Successful exploitation requires a user to open a specially...

PT-2026-7431

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2410 and earlier Description DNG SDK versions 1.7.1 2410 and earlier contain an out-of-bounds read issue that may result in memory exposure. An attacker could potentially use this to disclose sensitive information stored...

PT-2026-7385

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 15.1.0 and earlier Description An out-of-bounds write issue exists in Substance3D - Designer. Successful exploitation requires a user to open a specially crafted file, potentially allowing an attacker to execute...

PT-2026-7316

Name of the Vulnerable Software and Affected Versions IntelR Chipset Software versions prior to 10.1.20266.8668 Description The software has incorrect default permissions that could allow a local user to gain elevated privileges. An attacker with authenticated access and a high level of complexit...

PT-2026-7301

Name of the Vulnerable Software and Affected Versions TDX Module versions prior to tdx1.5 Description A race condition exists within the hypervisor in Ring 0 for some TDX Module versions prior to tdx1.5, potentially leading to a denial of service. An authorized adversary with privileged user...

PT-2026-7394

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 21.1 and earlier InDesign Desktop version 20.5.1 and earlier Description The software has a Heap-based Buffer Overflow issue that may lead to application denial-of-service. An attacker could exploit this to crash the...

PT-2026-7427

Name of the Vulnerable Software and Affected Versions Bridge versions 15.1.3 and earlier Bridge versions 16.0.1 and earlier Description Bridge versions 15.1.3 and 16.0.1, and earlier are susceptible to an Integer Overflow or Wraparound condition. Successful exploitation could lead to arbitrary co...

PT-2026-7374

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description The software contains an out-of-bounds read issue when processing a specially designed file. This could allow an attacker to execute code with the privileges of the current user. User...

PT-2026-7393

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 21.1 and 20.5.1 and earlier Description A Heap-based Buffer Overflow vulnerability exists that may allow arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to ope...

PT-2026-7381

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description After Effects is susceptible to a Use After Free issue that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to open a...

PT-2026-7367

Name of the Vulnerable Software and Affected Versions Audition versions 25.3 and earlier Description Audition versions 25.3 and earlier are subject to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to gain access to sensitive information stored...

PT-2026-7365

Name of the Vulnerable Software and Affected Versions Audition versions 25.3 and earlier Description Audition versions 25.3 and earlier are susceptible to an out-of-bounds read issue, potentially leading to memory exposure. Successful exploitation requires a user to open a malicious file, allowin...

PT-2026-7294

Name of the Vulnerable Software and Affected Versions versions prior to 2025-27572 Description A hypervisor may allow an information disclosure. An authorized adversary with a privileged user and a high complexity attack may enable data exposure. This may occur via local access when attack...

PT-2026-7307

Name of the Vulnerable Software and Affected Versions IntelR Graphics Driver affected versions not specified Description A configuration issue with default permissions within some IntelR Graphics Driver software operating in Ring 2—a privileged process—could allow an escalation of privilege. An...

PT-2026-7380

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 25.6 and earlier Description The Adobe After Effects video and dynamic graphics editing software is affected by an out-of-bounds write issue. Successful exploitation of this issue could allow an attacker to execute...

PT-2026-7384

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 15.1.0 and earlier Description The software for 3D model texturing, Adobe Substance 3D Designer, contains an out-of-bounds write issue in memory. Successful exploitation requires a user to open a specially craft...