https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-7206.htmlhttps://patchthecve.com/cve/CVE-2023-7206.htmlWed, 17 Jun 2026 06:52:18 +0000HIGH 7.8: In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape. https://patchthecve.com/cve/CVE-2023-32203.htmlhttps://patchthecve.com/cve/CVE-2023-32203.htmlWed, 17 Jun 2026 05:58:18 +0000HIGH 7.8: Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e374b. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.https://patchthecve.com/cve/CVE-2023-31278.htmlhttps://patchthecve.com/cve/CVE-2023-31278.htmlWed, 17 Jun 2026 05:56:42 +0000HIGH 7.8: Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process.https://patchthecve.com/cve/CVE-2023-31244.htmlhttps://patchthecve.com/cve/CVE-2023-31244.htmlWed, 17 Jun 2026 05:56:40 +0000HIGH 7.8: The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer. https://patchthecve.com/cve/CVE-2023-29503.htmlhttps://patchthecve.com/cve/CVE-2023-29503.htmlWed, 17 Jun 2026 05:50:14 +0000HIGH 7.8: The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. https://patchthecve.com/cve/CVE-2023-28653.htmlhttps://patchthecve.com/cve/CVE-2023-28653.htmlWed, 17 Jun 2026 05:48:28 +0000HIGH 7.8: The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. https://patchthecve.com/cve/CVE-2023-27916.htmlhttps://patchthecve.com/cve/CVE-2023-27916.htmlWed, 17 Jun 2026 05:46:06 +0000HIGH 7.8: The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process. https://patchthecve.com/cve/CVE-2023-32539.htmlhttps://patchthecve.com/cve/CVE-2023-32539.htmlWed, 17 Jun 2026 05:59:03 +0000HIGH 7.8: Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e3c04. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current prhttps://patchthecve.com/cve/CVE-2023-32289.htmlhttps://patchthecve.com/cve/CVE-2023-32289.htmlWed, 17 Jun 2026 05:58:29 +0000HIGH 7.8: The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds read in IO_CFG. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. https://patchthecve.com/cve/CVE-2023-32281.htmlhttps://patchthecve.com/cve/CVE-2023-32281.htmlWed, 17 Jun 2026 05:58:29 +0000HIGH 7.8: The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in the FontManager. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. https://patchthecve.com/cve/CVE-2023-32545.htmlhttps://patchthecve.com/cve/CVE-2023-32545.htmlWed, 17 Jun 2026 05:59:04 +0000HIGH 7.8: The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current proce