2026

Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to e

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE san

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routin

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tor

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-cop

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(roo

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(nod

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify deriv

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certifi

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the pack

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.2.1, the preAuthEncoding fu

Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c

Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co

After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c

Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could resul

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

Bridge is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in t

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in th

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature byp

ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypas

ColdFusion is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A l

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary co

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulner

ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacke

ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerabi

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th

After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary c

Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co

Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in

UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. From

Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An a

Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c

Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution i

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a re

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful ex

NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-

NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a