ZDI-26-638: Oracle Outside In Technology WPS File Parsing Memory Corruption Remote Code Execution VulnerabilityZDI disclosed memory corruption in Oracle Outside In Technology's WPS file parsing (CVE-2026-60414) enabling user-triggered remote code execution.ZDI Published AdvisoriesSep 9, 05:00 UTC · Sep 9, 2026Vulnerability4 sourcesCVE-2026-604141 · 1 read22
ZDI-26-637: Oracle Outside In Technology GEM File Parsing Integer Overflow Remote Code Execution VulnerabilityZDI disclosed an integer overflow in Oracle Outside In Technology's GEM file parsing (CVE-2026-60413) enabling user-triggered remote code execution.ZDI Published AdvisoriesSep 9, 05:00 UTC · Sep 9, 2026Vulnerability4 sourcesCVE-2026-604131 · 1 read22
ZDI-26-635: Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution VulnerabilityZDI disclosed CVE-2026-60392, an integer overflow in Oracle Outside In PDF parsing enabling remote code execution, rated CVSS 7.8.ZDI Published AdvisoriesSep 9, 05:00 UTC · Sep 9, 2026Advisory4 sourcesCVE-2026-603922 · 1 read25
ZDI-26-636: Oracle Outside In Technology PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityZDI disclosed a heap-based buffer overflow in Oracle Outside In Technology's PostScript parsing (CVE-2026-60412) enabling user-triggered remote code execution.ZDI Published AdvisoriesSep 9, 05:00 UTC · Sep 9, 2026Vulnerability4 sourcesCVE-2026-604122 · 1 read22