Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High7.8Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High7.8Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High7.8Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High7.8Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- Medium6.0The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure.EPSS 0.1%Oct 13, 2026
- High7.1AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access.EPSS 0.1%Oct 13, 2026
- High8.8Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- Critical9.8Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.EPSS 0.1%Oct 13, 2026
- High7.3NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write.Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution VulnerabilityEPSS 0.6%Oct 13, 2026
- Medium5.2An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized leng…Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality.Oct 12, 2026
- High7.0Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.EPSS 0.2%Oct 12, 2026
- High7.0Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.EPSS 0.2%Oct 12, 2026
- High7.8The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRandomData().Oct 11, 2026
- High7.8The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c declared two variab…Oct 11, 2026
- Medium6.8The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK…Oct 11, 2026
- High8.5MariaDB server is a community developed fork of MySQL server.EPSS 0.9%Oct 9, 2026
- High8.8A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows…Oct 9, 2026
- Critical9.3A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a de…Oct 9, 2026
- High7.7IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.EPSS 0.3%Oct 8, 2026
- High7.5IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cau…EPSS 0.3%Oct 8, 2026
- High7.5IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cau…EPSS 0.3%Oct 8, 2026