CLEANSTART-2026-ZC69283 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

CVE-2025-15558 affects multiple packages. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

CVE-2024-33352

CVEID : CVE-2024-33352 Bluestacks Advisory ID : pending Name of the affected products and versions : BlueStacks for Windows versions prior to 10.40.1000.502 Vulnerability type : CWE-552: Files or Directories Accessible to External Parties Summary BlueStacks is an Android emulator which runs the...

CLEANSTART-2026-XS99971 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

CVE-2025-15558 affects multiple packages. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

Linux Distros Unpatched Vulnerability : CVE-2026-118131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allow...

AZL-111956 CVE-2026-118131 affecting package gnupg2 2.4.9-3

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

UBUNTU-CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

EUVD-2026-111235

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131

GnuPG (version 2.5.21) for Windows is vulnerable to a security flaw where the default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories. A low-privilege attacker can exploit this by cre...

CVE-2026-118131 CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131: Undefined Security Weakness

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

gnupg permission and access control issues vulnerability

GNU gnupg version 2.5.21 contains a vulnerability related to permission escalation and access control. This issue arises because the default DACL inheritance in the Windows C:\ProgramData directory permits BUILTIN\Users members to create arbitrary subdirectories. Low-privilege attackers can thus...

Clario for Windows Desktop DLL Hijacking / Privilege Escalation

Clario for Windows Desktop versions through 2024-04-11 contain weak permissions on ProgramData directories and load missing DLL files from them as SYSTEM, allowing a local low-privileged user to execute code with SYSTEM privileges...

PT-2026-113554

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%HylandDesktopHostbin folder with weak permissions. A local user can exploit this to escalate privileges...

Hyland Desktop Host Permission Licensing and Access Control Vulnerabilities

Hyland Desktop Host for Windows versions prior to 25.1.1 have a vulnerability related to permission permissions and access control. This vulnerability arises from privileged services running with low privileges from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder, which may allow local users to...

CLEANSTART-2026-YX87977 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

Security vulnerability affects the flux-image-automation-controller package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default...

CLEANSTART-2026-NT42167 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

CVE-2025-15558 affects multiple packages. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

CLEANSTART-2026-WR28869 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

Security vulnerability affects the minio-operator package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default...