<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Zero Day Initiative — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/zdi" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Zero Day Initiative (zdi).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/zdi.png</url>
      <title>Zero Day Initiative — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:06 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-111105 · 7 HIGH — Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-111105</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-111105</guid>
      <description>Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that th…</description>
      <category>High</category>
      <pubDate>Thu, 15 Oct 2026 17:42:55 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-92176 · 7.8 HIGH — pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-92176</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-92176</guid>
      <description>pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploi…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 18:05:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-92177 · 7.8 HIGH — pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-92177</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-92177</guid>
      <description>pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 18:05:50 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-92178 · 7.8 HIGH — pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-92178</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-92178</guid>
      <description>pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to e…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 18:05:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-92179 · 7.8 HIGH — pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-92179</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-92179</guid>
      <description>pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 18:05:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-92180 · 7.8 HIGH — pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-92180</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-92180</guid>
      <description>pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect.…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 18:05:23 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-19781 · 7.8 HIGH — Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-19781</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-19781</guid>
      <description>Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 18:04:05 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-19886 · 7.8 HIGH — OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-19886</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-19886</guid>
      <description>OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 18:02:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-19885 · 7.8 HIGH — OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-19885</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-19885</guid>
      <description>OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 18:02:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-19774 · 7.1 HIGH — BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-19774</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-19774</guid>
      <description>BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicio…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 18:01:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-19773 · 9.8 CRITICAL — libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-19773</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-19773</guid>
      <description>libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to…</description>
      <category>Critical</category>
      <pubDate>Tue, 15 Sep 2026 18:01:09 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-19504 · 4 MEDIUM — Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-19504</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-19504</guid>
      <description>Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fabric.js. Interaction with this library is required to exploit this vulnerabi…</description>
      <category>Medium</category>
      <pubDate>Tue, 15 Sep 2026 18:00:46 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-19780 · 8.8 HIGH — Koha Eval Code Injection Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-19780</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-19780</guid>
      <description>Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists w…</description>
      <category>High</category>
      <pubDate>Tue, 15 Sep 2026 16:05:37 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18263 · 7.8 HIGH — Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18263</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18263</guid>
      <description>Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first o…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:26:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18262 · 7.8 HIGH — Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18262</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18262</guid>
      <description>Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first o…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:25:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-13121 · 7.8 HIGH — Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-13121</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-13121</guid>
      <description>Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first o…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:25:44 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-15686 · 7.2 HIGH — Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-15686</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-15686</guid>
      <description>Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adminer. Authentication is required to exploit this vu…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:25:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-15679 · 7.8 HIGH — Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-15679</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-15679</guid>
      <description>Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. U…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:24:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18309 · 7.8 HIGH — GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18309</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18309</guid>
      <description>GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:24:13 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18308 · 7.8 HIGH — GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18308</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18308</guid>
      <description>GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:24:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18307 · 7.8 HIGH — GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18307</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18307</guid>
      <description>GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability i…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:23:52 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18306 · 7.8 HIGH — GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18306</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18306</guid>
      <description>GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:23:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18305 · 7.8 HIGH — GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18305</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18305</guid>
      <description>GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:23:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18304 · 7.8 HIGH — GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18304</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18304</guid>
      <description>GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:23:27 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18303 · 7.8 HIGH — GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18303</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18303</guid>
      <description>GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:23:19 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18302 · 7.8 HIGH — GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18302</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18302</guid>
      <description>GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability i…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:23:11 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18301 · 7.8 HIGH — GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18301</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18301</guid>
      <description>GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:23:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18300 · 7.8 HIGH — GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18300</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18300</guid>
      <description>GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:22:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18299 · 7.8 HIGH — GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18299</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18299</guid>
      <description>GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabi…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:22:34 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18298 · 7.8 HIGH — GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18298</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18298</guid>
      <description>GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulne…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:22:25 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18297 · 7.8 HIGH — GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18297</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18297</guid>
      <description>GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vuln…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:22:17 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18296 · 7.8 HIGH — GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18296</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18296</guid>
      <description>GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulne…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:22:07 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18295 · 7.8 HIGH — GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18295</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18295</guid>
      <description>GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerabilit…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:22:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18294 · 7.8 HIGH — OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18294</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18294</guid>
      <description>OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:21:40 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18293 · 7.8 HIGH — OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18293</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18293</guid>
      <description>OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:21:32 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18292 · 7.8 HIGH — OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18292</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18292</guid>
      <description>OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro . User interaction is required to exploi…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:21:25 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18291 · 7.8 HIGH — OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18291</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18291</guid>
      <description>OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploit…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:21:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18290 · 7.8 HIGH — OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18290</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18290</guid>
      <description>OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to explo…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:21:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18289 · 7.8 HIGH — OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18289</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18289</guid>
      <description>OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to explo…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:21:02 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18288 · 7.8 HIGH — OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18288</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18288</guid>
      <description>OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to expl…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:20:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18287 · 7.8 HIGH — Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18287</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18287</guid>
      <description>Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vuln…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:20:37 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18286 · 7.8 HIGH — Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18286</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18286</guid>
      <description>Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vu…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:20:29 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18285 · 7.8 HIGH — Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18285</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18285</guid>
      <description>Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Aeon. User interaction is required to exploit this v…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:20:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18284 · 7.8 HIGH — Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18284</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18284</guid>
      <description>Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ab…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:19:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18283 · 2.4 LOW — Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18283</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18283</guid>
      <description>Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vul…</description>
      <category>Low</category>
      <pubDate>Thu, 20 Aug 2026 16:19:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18282 · 8 HIGH — Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18282</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18282</guid>
      <description>Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:19:29 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18281 · 8 HIGH — Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18281</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18281</guid>
      <description>Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must fi…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:19:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18280 · 3.9 LOW — Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18280</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18280</guid>
      <description>Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to expl…</description>
      <category>Low</category>
      <pubDate>Thu, 20 Aug 2026 16:19:11 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18279 · 8.8 HIGH — Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18279</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18279</guid>
      <description>Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exp…</description>
      <category>High</category>
      <pubDate>Thu, 20 Aug 2026 16:19:02 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18278 · 3.5 LOW — Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-18278</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18278</guid>
      <description>Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sony XAV-9500ES devices. An attacker mus…</description>
      <category>Low</category>
      <pubDate>Thu, 20 Aug 2026 16:18:52 GMT</pubDate>
    </item>
  </channel>
</rss>
