CVE-2026-21111 is an out-of-bounds write vulnerability in the Samsung Mobile component libsthmbc.so affecting versions prior to One UI 8.5. This flaw allows local attackers with limited privileges to write outside the intended memory bounds, potentially leading to memory corruption. The vulnerability has a medium severity rating with a CVSS 4.0 score of 6.9. No public exploit code or known exploitation in the wild has been reported. No patch or fixed version information is currently available.
CVE-2026-21110 is an out-of-bounds write vulnerability in the Samsung Mobile component libsavscmn.so prior to One UI 8.5. This flaw allows local attackers with limited privileges to execute arbitrary code on affected devices. The vulnerability has a medium severity rating with a CVSS 4.0 score of 6.9. No specific affected versions or patch information is provided in the available data.
CVE-2026-21107 is an out-of-bounds write vulnerability in Samsung Notes versions prior to 4.4.45.5. This flaw allows local attackers with limited privileges to write outside the intended memory bounds, potentially leading to memory corruption. The vulnerability has a medium severity with a CVSS 4.0 base score of 6.9.
CVE-2026-21091 is an out-of-bounds write vulnerability in the libcodec2secevrcdec.so component of Samsung Mobile Devices. This flaw exists in versions prior to the SMR Sep-2026 Release 1. It allows local attackers with limited privileges to write outside the intended memory bounds, potentially leading to memory corruption.
CVE-2026-21090 is an out-of-bounds write vulnerability in the libsaviextractor.so component of Samsung Mobile Devices. This flaw exists in versions prior to the SMR (Security Maintenance Release) September 2026 Release 1. It allows local attackers with limited privileges to write outside the intended memory bounds, potentially leading to memory corruption.
CVE-2026-21087 is an out-of-bounds write vulnerability in the libmdnie.so component of Samsung Mobile Devices prior to the SMR September 2026 Release 1. This flaw allows local attackers to execute arbitrary code with system server privileges, posing a high security risk.
CVE-2026-21085 is a high-severity out-of-bounds write vulnerability in the Keymaster trustlet component of Samsung Mobile Devices prior to the SMR September 2026 Release 1. It allows local privileged attackers to write outside the intended memory bounds, potentially leading to memory corruption. The vulnerability requires local privileged access and does not require user interaction. No public exploit code or known exploitation in the wild has been reported. No specific affected versions or patch information is provided.
Implementation of JOSE for C/C++
Security Fix(es):
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms (`alg` = `A128KW`, `A192KW`, `A256KW`) does not validate the length of the attacker-supplied `encrypted_key` (JWE Encrypted Key) before unwrapping it into a fixed-size, heap-allocated Content Encryption Key (CEK) buffer. A remote, unauthenticated attacker who can submit a crafted JWE to an application that decrypts it with an AES-KW symmetric key can trigger an out-of-bounds heap write, corrupting the heap. This leads at minimum to a crash (denial of service) and, depending on the heap layout and allocator, may be leverageable for further memory-corruption impact. `cjose_jwe_import()` / `cjose_jwe_decrypt()` are pre-authentication entry points: they parse and process fully attacker-controlled input. Upgrade to cjose 0.6.2.5 to receive a patch. If upgrading is not immediately possible, reject the AES Key Wrap algorithms (`A128KW`/`A192KW`/`A256KW`) for untrusted JWEs at the application layer.(CVE-2026-53938)
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE using an AES-CBC-HMAC content-encryption algorithm (`A128CBC-HS256`, `A192CBC-HS384`, or `A256CBC-HS512`) together with any key-management algorithm that generates a fresh content-encryption key (CEK), the CEK is all zero bytes instead of being randomly generated. The resulting JWE is therefore encrypted and authenticated under a fixed, publicly known key, so anyone who obtains the JWE can recover the plaintext and forge or modify the content. This is fixed in version 0.6.2.6 by `_cjose_jwe_set_cek_aes_cbc()` generating the CEK from `RAND_bytes`. A regression test asserts that the `encrypted_key` differs across two encryptions for each AES-CBC-HMAC variant. Until upgrading, for data encrypted with cjose, three options are available. Use an AES-GCM `enc` (`A128GCM` / `A192GCM` / `A256GCM`) instead of an AES-CBC-HMAC `enc`, use `alg=dir` with a caller-supplied CEK, or avoid using cjose for JWE encryption with the affected algorithm pair. These are mitigations for new ciphertexts only; data already encrypted under the zero key remains compromised and should be re-encrypted (and any secrets it contained rotated).(CVE-2026-53939)
Adobe Acrobat Reader contains an out-of-bounds write vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects multiple versions of Adobe Acrobat Reader up to specified build numbers. The issue is classified as high severity with a CVSS score of 7.8.
Adobe Acrobat contains an out-of-bounds write vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited and affects certain versions of Adobe Acrobat. The issue is classified as high severity due to its potential impact on confidentiality, integrity, and availability.
Adobe Acrobat contains an out-of-bounds write vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited and affects certain versions of Adobe Acrobat. The vulnerability has a high severity rating with a CVSS score of 7.8.
Adobe Acrobat contains an out-of-bounds write vulnerability (CWE-787) that may allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The issue has a high severity rating with a CVSS score of 7.8.
Adobe Acrobat contains an out-of-bounds write vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction for exploitation and affects multiple versions of Adobe Acrobat up to specified builds. The issue is classified as high severity due to its potential impact on confidentiality, integrity, and availability.
Adobe Photoshop 2026 contains an out-of-bounds write vulnerability that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.6 and 26.11.6. The CVSS score is 7.8, indicating a high severity issue.
Adobe Photoshop 2026 contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 27.6 and 26.11.6. The CVSS score is 7.8, indicating a high severity risk.
Adobe Illustrator Desktop 2026 contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 30.7 and 29.8.10. The CVSS 3.1 base score is 7.8, indicating high severity.
CVE-2026-78524 is a high-severity out-of-bounds write vulnerability in Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-70296 is a critical out-of-bounds write vulnerability in the Windows Imaging Component of Microsoft Windows 10 Version 1607 and other versions. It allows an unauthorized attacker to execute code remotely over a network without user interaction. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Microsoft has released official fixes for all affected versions.
CVE-2026-71345 is a high-severity out-of-bounds write vulnerability in the Windows Spaceport.sys driver affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to execute arbitrary code with elevated privileges. The vulnerability has been officially fixed in specific Windows 10 builds, and patches are available.