2026

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the contex

`OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by a

Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the contex

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the

Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context o

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via impr

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in lib

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass auth

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndA

A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function

A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipul

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authen

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The cred

The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rul

The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the a

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code e

ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vuln

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An att

ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerabi

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in t

Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could

A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell comm

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows att

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerab

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An att

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An att

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An att

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofi

Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a netw

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network

Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a

In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This co

In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission che

In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could