Desktop Applications
CISA Adds Exploited Siemens Software Center Flaw to KEV
CISA added actively exploited Siemens CVE-2026-110936 to KEV. Update Software Center, investigate the published indicators, and retain evidence.
Changing NHIServiSign Update Fixes OS Command Injection
A malicious web page can induce the identified Linux NHIServiSign client to execute operating-system commands when visited. Update affected signing endpoints to the vendor's fixed release; related Windows and macOS branding does not establish applicability.
Foxit PDF Reader and Editor Updates Address 31 Vulnerabilities
Foxit Reader and Editor updates cover document-processing, updater, path-traversal and signature-validation flaws. Match product, platform and release branch before updating; the thirty-one-CVE set does not mean every issue affects every installation.
Adobe Premiere Pro Update Addresses 1 Vulnerability
Premiere Pro 26.5 and 25.6.6 address an SSRF security-feature bypass. Update the matching branch and validate projects, plugins and exports; the advisory does not establish an internet-facing code-execution vulnerability.
Adobe Substance 3D Modeler Update Addresses 4 Vulnerabilities
Substance 3D Modeler 1.22.8 fixes four memory-safety flaws that can permit code execution with user interaction. Deploy the stated fixed release and verify the application version before resuming untrusted-asset workflows.
Adobe Bridge Update Addresses 7 Vulnerabilities
Adobe Bridge 15.1.8 LTS and 16.0.7 fix six code-execution flaws and one memory-exposure flaw requiring user interaction. Update the installed branch; Adobe reports no known exploitation in the wild.
Adobe InDesign Update Addresses 2 Vulnerabilities
Adobe InDesign updates fix two user-interaction-dependent flaws that can crash the application on Windows and macOS. Install 21.6 or 20.5.5 for the appropriate branch; the bulletin does not describe code execution.