Threat database

CVE-2026-5495 is a high-severity vulnerability in Labcenter Electronics Proteus version 8.17 SP5. It involves an out-of-bounds write during the parsing of PDSPRJ files, which can lead to remote code execution if a user opens a malicious file or visits a malicious page. Exploitation requires user interaction. The vulnerability arises from improper validation of user-supplied data, allowing an attacker to write beyond allocated memory and execute arbitrary code in the context of the current process. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-5494 is a high-severity vulnerability in Labcenter Electronics Proteus version 8.17 SP5 involving an out-of-bounds write during the parsing of PDSPRJ files. This flaw allows remote attackers to execute arbitrary code by tricking a user into opening a malicious file or visiting a malicious page. The vulnerability arises from improper validation of user-supplied data, leading to a buffer overflow condition. Exploitation requires user interaction. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-5493 is a high-severity vulnerability in Labcenter Electronics Proteus version 8.17 SP5 involving an out-of-bounds write during parsing of PDSPRJ files. This flaw allows remote attackers to execute arbitrary code by convincing a user to open a malicious file or visit a malicious page. The vulnerability arises from improper validation of user-supplied data, leading to a buffer overflow condition. Exploitation requires user interaction and results in code execution with the privileges of the current process.

CVE-2026-5496 is a high-severity vulnerability in Labcenter Electronics Proteus version 8.17 SP5 involving a type confusion flaw in the parsing of PDSPRJ files. This flaw allows remote attackers to execute arbitrary code if a user opens a malicious file or visits a malicious page. Exploitation requires user interaction. The vulnerability arises from improper validation of user-supplied data leading to type confusion and code execution in the context of the current process. No official patch or remediation guidance is currently available from the vendor.