CVE-2026-103830

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability (CWE-121). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically where a victim opens a maliciou...

CVE-2026-103843

Substance3D - Stager is affected by a Use After Free vulnerability (CWE-416) that could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically for a victim to open a malicious file. Adobe has r...

CVE-2026-103846 Dimension | Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting) (CWE-79)

Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation o...

CVE-2026-103854

Adobe Dimension is affected by a Stack-based Buffer Overflow vulnerability (CWE-121). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Exploitation requires user interaction , specifically by the victim opening a malicious file. Adobe h...

CVE-2026-106628

Adobe Experience Manager is impacted by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interact...

CVE-2026-106625

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104344

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104341

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103849

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation ...

CVE-2026-104340

Adobe FrameMaker is affected by a Heap-based Buffer Overflow vulnerability (CWE-122) that could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction, specifically the opening of a malicious file. Adobe has released a...

CVE-2026-103966

Adobe Framemaker is impacted by a Heap-based Buffer Overflow (CWE-122) vulnerability. This flaw could lead to arbitrary code execution within the context of the current user. Exploitation requires user interaction , specifically when a victim opens a malicious file. No specific affected versions,...

CVE-2026-103966 Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-106625 Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-106625

Adobe Framemaker is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically when a victim opens a malicious file. No s...

CVE-2026-103967 Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103967

Adobe Framemaker is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically the victim opening a malicious file. No sp...

CVE-2019-10092

CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point t...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084, Atlassian Confluence OGNL Injection Vulnerability Atlassian Confluence is a widely used wiki system in enterprises, and some versions contain an OGNL expression injection vulnerability. Attackers can exploit this vulnerability to execute arbitrary code on the target...

PT-2026-113295

Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

DNS-Mayhem-CVE-2026-41096-Deep-Dive

DNS-Mayhem-CVE-2026-41096-Deep-Dive In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and defensive guidance for security teams. Overview CVE‑2026‑41096 i...