40950 matches found
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
CVE-2026-74859
gnome-tweaks contains a path traversal vulnerability in its shell theme installer. The installer extracts user-supplied ZIP archives without validating archive member paths, allowing a crafted theme archive to write files outside ~/.themes via ../ sequences, absolute paths, or symlink entries. Th...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
PT-2026-87608
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use-after-free condition in Windows Shell allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...
PT-2026-87429
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use-after-free condition in Windows Shell allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...
CVE-2026-86713: Use After Free
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the loadmon module's stop path where exitandcleanup deletes the LoadMon object and frees the performance counter before perfend attempts to access it. Attackers can trigger this vulnerability by issuing the loadmon stop comma...
PT-2026-88278
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word...
PT-2026-87421
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description External control of a file name or path in Windows Shell allows an authorized attacker to elevate privileges locally, which can lead to unauthorized system impact. Recommendations At th...
PT-2026-87542
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description Missing authentication for a critical function in Windows Shell allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At...
Joern 4.0.623
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...