Total
10460 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-48331 | 3 Adobe, Linux, Microsoft | 3 Campaign, Linux Kernel, Windows | 2026-10-23 | N/A | 10.0 CRITICAL |
| Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed. | |||||
| CVE-2026-19139 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-10-23 | N/A | 7.4 HIGH |
| Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High) | |||||
| CVE-2026-19158 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-10-23 | N/A | 7.5 HIGH |
| Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-19163 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-10-23 | N/A | 8.3 HIGH |
| Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-48317 | 3 Adobe, Linux, Microsoft | 3 Campaign, Linux Kernel, Windows | 2026-10-23 | N/A | 9.6 CRITICAL |
| Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. | |||||
| CVE-2026-19171 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-10-23 | N/A | 9.6 CRITICAL |
| Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-113210 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-10-23 | N/A | 8.8 HIGH |
| Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-0293 | 2 Microsoft, Paloaltonetworks | 2 Windows, Prisma Access Agent | 2026-10-23 | N/A | 6.0 MEDIUM |
| A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected. | |||||
| CVE-2026-47940 | 2 Adobe, Microsoft | 2 Lightroom, Windows | 2026-10-23 | N/A | 7.8 HIGH |
| Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-48409 | 2 Adobe, Microsoft | 2 Lightroom, Windows | 2026-10-23 | N/A | 7.8 HIGH |
| Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-19696 | 2 Microsoft, Wireshark | 2 Windows, Wireshark | 2026-10-23 | N/A | 6.6 MEDIUM |
| Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows | |||||
| CVE-2026-0292 | 2 Microsoft, Paloaltonetworks | 2 Windows, Prisma Access Agent | 2026-10-23 | N/A | 6.0 MEDIUM |
| An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected. | |||||
| CVE-2026-48405 | 2 Adobe, Microsoft | 2 Lightroom, Windows | 2026-10-23 | N/A | 7.8 HIGH |
| Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-48406 | 2 Adobe, Microsoft | 2 Lightroom, Windows | 2026-10-23 | N/A | 7.8 HIGH |
| Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-48410 | 2 Adobe, Microsoft | 2 Lightroom, Windows | 2026-10-23 | N/A | 7.8 HIGH |
| Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-48404 | 2 Adobe, Microsoft | 2 Lightroom, Windows | 2026-10-23 | N/A | 7.8 HIGH |
| Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-48441 | 2 Adobe, Microsoft | 2 Lightroom, Windows | 2026-10-23 | N/A | 8.6 HIGH |
| Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. | |||||
| CVE-2026-48408 | 2 Adobe, Microsoft | 2 Lightroom, Windows | 2026-10-23 | N/A | 7.8 HIGH |
| Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-48397 | 2 Adobe, Microsoft | 2 Lightroom, Windows | 2026-10-23 | N/A | 8.6 HIGH |
| Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. | |||||
| CVE-2026-0294 | 3 Apple, Microsoft, Paloaltonetworks | 3 Macos, Windows, Prisma Access Agent | 2026-10-23 | N/A | 7.8 HIGH |
| A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected. | |||||