Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin.

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.