CVE-2026-81940 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...

CVE-2026-81940 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...

PT-2026-89636

🚨 CVE-2026-81940 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names. 🎖@cveNotify...

CVE-2026-81940: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...

CVE-2026-79617 Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter

Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15...

CVE-2026-79617 Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter

Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15...

CVE-2026-79617

CVE-2026-79617 is an improper access control vulnerability (Incorrect Permission Assignment for Critical Resource) in TÜBİTAK BİLGEM's Pardus LightDM Greeter , affecting versions before 0.4.15 . The flaw allows an attacker with local access and low privileges to exploit incorrectly configured acc...

ROS-20260909-73-0122

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created PDF file...

The vulnerability of the linedisp_display() function in the drivers/auxdisplay/line-display.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the linedispdisplay function in the drivers/auxdisplay/line-display.c module of the Linux kernel is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-70567

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70567

CVE-2026-70567 is a double free vulnerability in the Windows Display Enhancement Service that allows a low-privileged, authorized local attacker to achieve privilege escalation . The attack vector is local with high complexity and requires no user interaction. The CVSS 3.1 score is 7.0 (HIGH) wit...

EUVD-2026-73647

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

Windows Display Enhancement Service Elevation of Privilege Vulnerability

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70567: Double Free

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

ROS-20260908-73-0049

The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for NVIDIA’s virtual graphics processors, relates to the ability to access memory after it is freed. Exploiting this vulnerability can allow attackers to increase their privileges, cause service failures, and execute...

ROS-20260908-73-0048

The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for NVIDIA’s virtual graphics processors, relates to the ability to access memory after it is freed. Exploiting this vulnerability can allow attackers to increase their privileges, cause service failures, and execute...

PT-2026-87804

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053275 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when link nums greater than maxlinks Why Coverity repor...

CVE-2026-84896: Improper Neutralization of Input During Web Page Generation

The King Addons for Elementor WordPress plugin before 51.1.77 does not escape a widget display-style setting before outputting it in an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of any visitor to the affected page,...

PT-2026-86349

🚨 CVE-2026-84896 The King Addons for Elementor WordPress plugin before 51.1.77 does not escape a widget display-style setting before outputting it in an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of any visitor to the...