PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

The complete recent NVD stream, including unscored entries. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

16,974 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  1. NVD

    CVE-2026-95639 — Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in t…

    High · CVSS 3.1 8.6 · Assessor: [email protected]

    Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

    CVE-2026-95639
    Read original (opens in a new tab)
  2. NVD

    CVE-2026-95638 — Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95638
    Read original (opens in a new tab)
  3. NVD

    CVE-2026-95637 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95637
    Read original (opens in a new tab)
  4. NVD

    CVE-2026-95636 — Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code executi…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95636
    Read original (opens in a new tab)
  5. NVD

    CVE-2026-95635 — Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95635
    Read original (opens in a new tab)
  11. NVD

    CVE-2026-90530 — ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit…

    Critical · CVSS 3.1 9.3 · Assessor: [email protected]

    ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables R…

    CVE-2026-90530
    Read original (opens in a new tab)
  24. NVD

    CVE-2026-85473 — The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an…

    Medium · CVSS 3.1 5.3 · Assessor: [email protected]

    The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.

    CVE-2026-85473
    Read original (opens in a new tab)
  25. NVD

    CVE-2026-83966 — Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-83966
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.