PT-2025-46402

Name of the Vulnerable Software and Affected Versions IntelR NPU Drivers affected versions not specified Description A protection mechanism failure exists in some IntelR NPU Drivers within Ring 3. This can allow a denial of service. An unprivileged software adversary with an authenticated user an...

PT-2025-46519

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description A Heap-based Buffer Overflow exists in Format Plugins versions 1.1.1 and earlier. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. Use...

PT-2025-46524

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description A Use After Free issue exists in Format Plugins versions 1.1.1 and earlier, potentially leading to memory exposure. An attacker could exploit this to disclose sensitive information...

PT-2025-46389

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.160 Description A flaw exists in input validation within IntelR PROSet/Wireless WiFi Software for Windows. An authenticated attacker with high complexity access may be able ...

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

Adobe InDesign < 20.5.1 / 20.0 < 21.0.0 Multiple Arbitrary code execution (APSB25-106)

The version of Adobe InDesign installed on the remote Windows host is prior to 20.5.1, 21.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-106 advisory. - InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow...

PT-2025-46525

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier are susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to disclose sensitive...

PT-2025-46419

Name of the Vulnerable Software and Affected Versions System Event Log Viewer Utility software affected versions not specified Description An uncontrolled search path in some System Event Log Viewer Utility software within Ring 3: User Applications may allow an escalation of privilege. A local,...

PT-2025-46552

Name of the Vulnerable Software and Affected Versions Academy Software Foundation OpenEXR affected versions not specified Description A flaw exists in the parsing of EXR files due to insufficient validation of user-supplied data length before copying it to a heap-based buffer. This can allow a...

PT-2025-46442

Name of the Vulnerable Software and Affected Versions InCopy versions 20.5, 19.5.5 and earlier Description InCopy versions 20.5, 19.5.5 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution with the privileges of...

PT-2025-46428

Name of the Vulnerable Software and Affected Versions IntelR QAT Windows software versions prior to 2.6.0 Description A flaw exists in some IntelR QAT Windows software that may allow for a denial of service. A system software adversary with an authenticated user and a low complexity attack could...

Adobe Photoshop 26.x < 26.9 Vulnerability (APSB25-108)

The version of Adobe Photoshop installed on the remote Windows host is prior to 26.9. It is, therefore, affected by a vulnerability as referenced in the apsb25-108 advisory. - Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resul...

PT-2025-46520

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation could lead to arbitrary code execution with the privileges of the current...

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

PT-2025-46443

Name of the Vulnerable Software and Affected Versions InCopy versions 20.5 and 19.5.5 and earlier Description InCopy versions 20.5, 19.5.5, and earlier are susceptible to a Use After Free issue. Successful exploitation of this issue could lead to arbitrary code execution with the privileges of th...

Intel® Processor Identification Utility Software Advisory

Summary: Potential security vulnerabilities in some Intel® Processor Identification Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20010 Description: Use of unmaintained...

PT-2025-46521

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier contain an out-of-bounds read issue when processing a specially crafted file. This can lead to reading beyond the boundaries of allocated memory. A...

Adobe Photoshop 26.x < 26.9 Vulnerability (macOS APSB25-108)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 26.9. It is, therefore, affected by a vulnerability as referenced in the apsb25-108 advisory. - Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that...

Cross-site Scripting (XSS)

Overview changedetection.io is a Website change detection and monitoring service Affected versions of this package are vulnerable to Cross-site Scripting XSS via the validateurl function. An attacker can execute arbitrary JavaScript code in the context of another user by injecting a malicious...

Important: gimp

Issue Overview: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a...