21378 matches found
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-15621 mosaxiv clawlet File Tools fs_ops.go edit_file link following
A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function readfile/writefile/editfile of the file tools/fsops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was...
PT-2026-58466
Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which is a high-performance file system designed for large data sets. This flaw allow...
PT-2026-58340
Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A numeric truncation error in the Windows Resilient File System ReFS allows an authorized attacker to execute code locally, potentially enabling local privilege...
PT-2026-58617
Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...
Path traversal in CLI command allows deletion of root file system
...
PT-2026-58447
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow occurs in Windows NTFS, which may allow an unauthorized attacker to execute arbitrary code locally or remotely to affect the system. A heap-based buffer...
PT-2026-58304
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-50469: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...
PT-2026-58490
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A race condition occurs in Windows NTFS due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race condition i...
CVE-2026-48353: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...
CVE-2026-53486: Improper Limitation of a Pathname to a Restricted Directory
The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files and links outside the target directory. When extracting an archive to a directory, a crafted archive can read or write files outside that directory because hardlink and symlink...
CVE-2026-48338: Improper Limitation of a Pathname to a Restricted Directory
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...
CVE-2026-47996: Incorrect Authorization
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. A high-privileged attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not requir...
CVE-2026-56650: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally...
CVE-2026-56649: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Network File System allows an unauthorized attacker to execute code over a network...
CVE-2026-56194: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network...
CVE-2026-50492: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code with a physical attack...