2213 matches found
CVE-2026-63423
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63426
During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges...
.NET: .NET Elevation of Privilege Vulnerability
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-0293
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...
Linux Distros Unpatched Vulnerability : CVE-2026-70452
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution...
Security Bulletin: IBM i is Affected By An Improper Management Vulnerability in HTTP Server [CVE-2026-18071]
Summary IBM i is vulnerable to elevated privileges due to improper privilege management CVE-2026-18071 in HTTP Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18071 DESCRIPTION: IBM i could allow a local attacker to gain elevated privileges due to...
CVE-2026-16695 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-59917
Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...
CVE-2026-59916
CVE-2026-59916 affects Dell Display and Peripheral Manager (DDPM) for Windows, prior to version 2.3.0.17. The issue is described as an Improper Access Control vulnerability that could allow a low-privileged attacker with local access to achieve Elevation of Privileges and potentially arbitrary co...
CVE-2026-70467
A server-side request forgery ssrf vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all...
BELL-CVE-2026-68428
Bulletin has no description...
CVE-2026-73283
creationtimestamp| type| source ---|---|--- 2026-08-12 02:17:08+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3msu2rkcohk2c...
Linux Distros Unpatched Vulnerability : CVE-2026-62909
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-62909 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2026-62900
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-71063
Name of the Vulnerable Software and Affected Versions FortiSIEM version 7.5.0 FortiSIEM versions 7.4.0 through 7.4.2 FortiSIEM versions 7.3.0 through 7.3.5 FortiSIEM versions 7.2.x and earlier Description A server-side request forgery SSRF issue exists which may allow an attacker to execute...
GHSA-FX4Q-GJRX-2JW6 Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...
CVE-2026-62790
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...
CVE-2026-32791
Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...
EUVD-2026-56760
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-66802
CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...