A file upload vulnerability exists in Teampass v2.1.26. The vulnerability allows authenticated users with low privileged accounts to upload files to the files directory in the webroot. Malicious users can exploit this vulnerability to upload and run arbitrary code from the files directory.

A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file, potentially leading to to arbitrary code execution.