Search: 17.9-6

Adobe FrameMaker 2026 contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects versions up to 18.0.0.206 and 17.0.9.866. The issue has a high severity rating with a CVSS score of 7.8.

Adobe FrameMaker 2026 contains an out-of-bounds read vulnerability (CWE-125) that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS 3.1 base score is 5.5, indicating a medium severity. There is no information about an available patch or vendor advisory confirming remediation status.

Adobe FrameMaker 2026 contains a NULL Pointer Dereference vulnerability that can cause the application to crash, resulting in a denial-of-service condition. Exploitation requires a user to open a specially crafted malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS score is 5.5, indicating medium severity.

Adobe FrameMaker 2026 contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866.

Adobe FrameMaker 2026 contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects multiple versions up to 18.0.0.206 and 17.0.9.866. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe FrameMaker 2026 contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe FrameMaker 2026 contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects multiple versions up to 18.0.0.206 and 17.0.9.866. No patch information is provided.

Adobe FrameMaker 2026 contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS 3.1 score is 7.8, indicating high severity.

Adobe FrameMaker 2026 contains an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS score is 5.5, indicating a medium severity level.

The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to developers working within your Kubernetes cluster.

The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to developers working within your Kubernetes cluster.

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.

Perforce Helix Authentication Service (HAS) versions 2022.1 through 2025.2 contain a vulnerability due to the retention of a default SCIM bearer token in the installation templates. This default token is copied into the active configuration without automatic replacement, allowing an attacker who knows the token to authenticate to the SCIM API and perform user and group operations. The vulnerability was fixed in version 2026.1, released on July 17, 2026.

CVE-2026-84284 is an incorrect authorization vulnerability in GitLab CE/EE that affects versions from 17.11 up to but not including 19.2.8, 19.3 up to 19.3.6, and 19.4 up to 19.4.2. This flaw could allow an unauthenticated user to read work item contents from private groups and projects under certain conditions. The issue has been fixed in versions 19.2.8, 19.3.6, and 19.4.2.

CVE-2026-95127 is a high-severity vulnerability in libass version 0.17.5 that allows a remote attacker to cause a denial of service via uncontrolled resource consumption in the ass_outline_construct() function.

Vercel deepsec versions from 0.1.0 up to but not including 1.1.17 contain a link following vulnerability in the extractTarballLocally function. This flaw allows sandboxed code to write files outside its intended sandbox by planting symbolic or hard links in tarball results. An attacker controlling sandboxed code, such as a prompt-injected coding agent, can exploit this to write arbitrary files on the orchestrator host. The vulnerability has a CVSS 4.9 score, indicating medium severity.