PT-2026-60742

A vulnerability has been found in liftoff-sr CIPster up to 632336d414ef708a542377c1aa8d6fdb7c70a760. Affected by this issue is the function CipAppPath::deserialize symbolic of the file source/src/cip/cipepath.cc. Such manipulation leads to out-of-bounds read. The attack may be launched remotely...

CVE-2026-57077

creationtimestamp| type| source ---|---|--- 2026-07-16 23:52:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsgleymol2c 2026-07-17 01:24:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqsloopgpk2p...

CVE-2026-11740

creationtimestamp| type| source ---|---|--- 2026-07-16 23:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsfuuixjk2i...

CVE-2026-46336

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. From 0.96.0 until 0.140.0, authenticated users can rename uploaded files with path traversal sequences because app/models/modelfile.rb uses the user-controlled...

CVE-2026-13104

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-13104

Technical details for CVE-2026-13104 are not publicly available in the provided documents. Monitor for updates from Lenovo and security advisories; current entries only note a local authenticated arbitrary-code risk with elevated privileges.

EUVD-2026-44977

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-13103

A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code...

EUVD-2026-44976

A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code...

CVE-2026-13103

Lenovo App Store (Chinese market) contains a path traversal vulnerability allowing a local authenticated user to execute arbitrary code. The issue affects the package/component handling file paths, with impact on confidentiality, integrity, and availability reported as high. CVSS: from the report...

CVE-2026-9046

CVE-2026-9046 describes an insecure-permissions issue affecting Windows deployments of Legion Zone and Lenovo App Store (Chinese market). When installed on a non-system partition, a local user could potentially execute arbitrary code due to insufficient access controls. The vulnerability is class...

CVE-2026-9046

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

EUVD-2026-44975

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

CVE-2026-14266

creationtimestamp| type| source ---|---|--- 2026-07-16 16:33:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqro25h4we2v 2026-07-17 05:20:54+00:00| seen| https://bsky.app/profile/thecybersecguru.com/post/3mqsywb7tak2d 2026-07-17 05:39:01+00:00| seen|...

CVE-2026-14890

creationtimestamp| type| source ---|---|--- 2026-07-16 15:44:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrlcw3ngt2i 2026-07-16 18:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrtd76h2w 2026-07-23 12:59:29+00:00| seen|...

CVE-2026-63305

creationtimestamp| type| source ---|---|--- 2026-07-16 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116929896586145034 2026-07-16 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqrdssbvep2z 2026-07-16 13:44:04+00:00| seen|...

CVE-2026-20297

creationtimestamp| type| source ---|---|--- 2026-07-16 02:11:53+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqq5vdvydd2i 2026-07-16 19:00:32+00:00| seen| https://t.me/truesecator/8417 2026-07-17 00:00:49+00:00| seen| https://t.me/truesecator/8417...

PT-2026-60521

Name of the Vulnerable Software and Affected Versions Legion Zone affected versions not specified Lenovo App Store affected versions not specified Description Insecure permissions in the Legion Zone and Lenovo App Store Windows applications, distributed exclusively in the Chinese market, may allo...

CVE-2026-36425

An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...

CVE-2026-36425

The CVE-2026-36425 issue affects OPSWAT AppRemover Driver (ardrv.sys, v2017.10.02.1551 and earlier). The IOCTL handler 0x2420031 can be invoked by a local, non-privileged user to terminate arbitrary processes without validating caller privileges, process protections, or critical-system status. Do...