CVE-2026-65181 Apache Impala: RCE via External Data Source Class Loading

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

CVE-2026-65181

Apache Impala versions 2.7.0 through 4.5.1 are vulnerable to an insufficient authorization flaw that can lead to remote code execution (RCE) . The issue stems from the fact that the driver.url and driver.class properties used in tables created with STORED BY JDBC are not checked for authorization...

PT-2026-89134

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 mageplaza/module-gdpr through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase all stored addresses by iterating the address id, via a GET request to...

CVE-2026-78451

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-78452

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-78453

Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...

CVE-2026-69731

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69687

Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69571

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69469

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69307

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69286

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to disclose information locally...

EUVD-2026-73807

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-78452

Out-of-bounds read in the Microsoft Windows SCSI Class System File allows an unauthorized attacker with physical access to perform an information disclosure attack. The vulnerability requires no privileges and no user interaction , with a CVSS 3.1 base score of 4.6 (MEDIUM) . CISA's SSVC assessme...

EUVD-2026-73805

Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73804

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-78451

CVE-2026-78451 is an untrusted pointer dereference in the Microsoft Windows SCSI Class System File that enables an unauthorized attacker to escalate privileges via a physical attack vector (CVSS AV:P). The vulnerability carries a CVSS 3.1 base score of 6.8 (Medium) with high impact to confidentia...

CVE-2026-69731

CVE-2026-69731 is a heap-based buffer overflow in the HID class driver that allows an authorized attacker to perform a local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with a low-complexity attack vector requiring no user interaction. No exploitation details...

EUVD-2026-73598

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69707

CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized, locally-privileged attacker to escalate privileges. The flaw is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, low privileges r...