162681 matches found
CVE-2026-79814 Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute...
EUVD-2026-93896
Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...
CVE-2026-79808
A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager . This flaw could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or cause a disruption in service availability. No specific patch versions, root cause...
CVE-2026-106278
Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-106233
Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-106247
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106268
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76753
A format string vulnerability exists in an affected service interface of HPE Networking ClearPass Policy Manager . This flaw could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation of this vulnerability may lead to arbitrary code execution . No specific s...
CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...
CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...
EUVD-2026-93880
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...
EUVD-2026-93878
A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent...
EUVD-2026-93979
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code...
GHSA-MC52-MWQ4-VFX3 knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
Overview A critical Arbitrary Code Execution ACE vulnerability exists in the Knowns Language Server Protocol LSP detection and startup pipeline. The system blindly trusts the settings.lsp.languages..binary field defined in the project-level .knowns/config.json file. Because this field is never...
CVE-2026-106441
The Hydra framework (versions prior to 1.3.6 and 1.4.0.dev9 ) is vulnerable to unsafe callable resolution due to how it handles Python logging configuration . The root cause is that Hydra passes configurations to logging.config.dictConfig() without applying its target policy to various handler, f...
CVE-2026-106440 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolves it with hydra.utils.getmethod, and later invokes the returned...
CVE-2026-106440
The hydra-optuna-sweeper package (versions 1.2.0 to 1.3.0 and 1.4.0.dev10 ) is vulnerable to arbitrary code execution. An attacker who controls Optuna sweep configurations or command-line overrides can provide a configuration-controlled dotted path in hydra.sweeper.custom_search_space. The system...
CVE-2026-106269
Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106413
Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...