The vulnerability of the Sensor Data Service system service in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Sensor Data Service system service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

CVE-2026-50183

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerability in the YouTubeAPI plugin. The plugin renders the snippet.title field returned by the YouTube Data API into the homepage gallery markup with no HTML encoding. The title is set ...

EUVD-2026-43952

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58619

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50367

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58619

CVE-2026-58619 is a Windows Sensor Data Service vulnerability described as a use-after-free that enables an authorized attacker to locally elevate privileges. The vulnerability is reported with CVSS 3.1: LOCAL attack vector, HIGH impact (C, I, A), and low privileges required with no user interact...

CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

EUVD-2026-44306

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-50367

CVE-2026-50367 describes an elevation of privilege in the Windows Sensor Data Service due to a logic flaw: incorrect access of an indexable resource (a range error). An authenticated local attacker could exploit this to escalate privileges on the affected system. The vulnerability’s CVSS 3.1 vect...

Windows Sensor Data Service Elevation of Privilege Vulnerability

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

Windows Sensor Data Service Elevation of Privilege Vulnerability

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50367: Incorrect Access of Indexable Resource

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

PT-2026-58664

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58619: Use After Free

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

PT-2026-58349

Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description An incorrect access of an indexable resource, known as a range error, occurs within the Windows Sensor Data Service. This flaw allows an authorized attacker to elevate the...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization in the addUser process of the JSON-RPC endpoint when manipulating the role argument. An attacker can gain unauthorized access to restricted actions or escalate privileges by sending crafted requests to the affecte...

CVE-2026-53355

In the Linux kernel, the following vulnerability has been resolved: net: rds: clear isends on setup unwind The RDS IB connection teardown path is written so it can run during partial startup and on repeated shutdown attempts. It uses NULL pointers to distinguish resources that are still owned fro...

CVE-2026-27679

Due to missing authorization checks in the SAP S/4HANA frontend OData Service Manage Reference Structures, an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and...