CVE-2026-49887

A permissions bypass in the maybeRemoveInvalidInstallerPackageName function of InstallRepository.kt allows for unauthorized app updates. This vulnerability can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. This issue is addressed in...

CVE-2026-49887

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49887

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28613

A vulnerability exists in ChannelImpl.java within the initAppLinkTypeAndIntent method due to improper input validation . This flaw allows for the launch of an arbitrary intent , which could lead to a local escalation of privilege without requiring additional execution privileges. Exploitation of ...

CVE-2026-28600

In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73954

In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28600

A confused deputy vulnerability exists in the onCreate method of PaymentDefaultDialog.java . This flaw allows an attacker to change the default payment application, potentially leading to a local escalation of privilege without requiring additional execution privileges or user interaction. This v...

EUVD-2026-73616

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

CVE-2026-69907

CVE-2026-69907 affects Windows Enterprise App Management , where improper handling of insufficient permissions or privileges allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity , low privileges r...

CVE-2026-69481

CVE-2026-69481 is a heap-based buffer overflow in Windows Enterprise App Management that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction, with high impact to confidentiality, integrity, and availability (CVSS 3.1 b...

EUVD-2026-72991

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...

Windows Enterprise App Management Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...

Windows Enterprise App Management Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

Citrix Workspace app for Windows Security Bulletin CVE-2026-78546 and CVE-2026-78547

Severity - Medium Description of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for Windows. Affected Versions The vulnerabilities affect the following supported versions of the Citrix Workspace app for Windows. Current Release CR Citrix Workspace app for...

PT-2026-87780

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

CVE-2026-76962: Missing Authorization

SAP S/4HANA Manage Bank Chains app does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on...

PT-2026-87506

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...

PT-2026-88525

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

CVE-2026-69907: Improper Handling of Insufficient Permissions or Privileges

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

PT-2026-88526

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...