HashiCorp security advisory (AV26-1019)
Canada’s Cyber Centre warns older HashiCorp Vault builds allow code execution via Raft snapshot plugin entries.
Stories per day · 30 days
2 RSS
15 stories, newest first · one card per story
Stories tagged #arbitrary-code-execution
USN-8902-1: libarchive vulnerability
Ubuntu patches libarchive signed integer overflow in ZIP writer that could let crafted encrypted entries crash the library or execute arbitrary code.
Unsloth Fixes Arbitrary Code Execution Flaw Triggered by Malicious Hugging Face Models
Unsloth patched Studio 2026.6.9 after default remote-code trust let malicious Hugging Face models execute Python on inspection.
4
Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution
Patched Unsloth Studio flaw let malicious AI models run arbitrary Python code on researchers' machines via trust_remote_code during model inspection.
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks
Apple patched CoreGraphics zero-day CVE-2026-86950 (out-of-bounds write enabling arbitrary code execution) reportedly exploited in sophisticated targeted attacks on iOS users.
Critical Apple Zero-Day Vulnerability Actively Exploited in Attacks
Apple patched actively exploited CoreGraphics zero-day CVE-2026-86950 enabling arbitrary code execution via crafted files in targeted attacks on iOS users.
USN-8825-1: Requests vulnerability
Ubuntu's USN-8825-1 says Requests temporary-file handling could allow arbitrary code execution.
Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920
CVE-2026-96442 was assigned for an incomplete Emacs fix of arbitrary code execution CVE-2024-53920.
Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920
Bas Alberts asks Red Hat to assign a CVE for an incomplete Emacs fix of CVE-2024-53920.
USN-8791-1: Ghostscript vulnerability
A Ghostscript vulnerability in JPEG 2000 image processing could allow arbitrary code execution via crafted files.
USN-8774-1: libheif vulnerabilities
Ubuntu patches libheif image-parsing flaws allowing denial of service or arbitrary code execution (CVE-2026-62291, CVE-2026-62377).
USN-8771-1: Valkey vulnerabilities
Ubuntu issued USN-8771-1 fixing Valkey flaws (CVE-2026-56684, CVE-2026-63639) that allow denial of service or possible code execution.
Emacs arbitrary code execution: incomplete fix for CVE-2024-53920
Incomplete fix for Emacs CVE-2024-53920 allows arbitrary code execution when viewing or editing untrusted files in non-Lisp modes like Perl flymake.
USN-8745-1: KissFFT vulnerabilities
Ubuntu released USN-8745-1 fixing two KissFFT flaws that could cause denial of service or arbitrary code execution.
Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)
Google patched actively exploited Chrome zero-day CVE-2026-87491, a V8 out-of-bounds write enabling sandboxed code execution, in Chrome 153.0.8010.36+.
1