21438 matches found
JLSEC-2026-107 Deno permission escalation vulnerability via open of privileged files with missing `--deny` flag
The Deno sandbox may be unexpectedly weakened by allowing file read/write access to privileged files in various locations on Unix and Windows platforms. For example, reading /proc/self/environ may provide access equivalent to --allow-env, and writing /proc/self/mem may provide access equivalent t...
PT-2026-32705
Name of the Vulnerable Software and Affected Versions Acrobat Reader versions prior to 26.001.21412 Description An Improperly Controlled Modification of Object Prototype Attributes, also known as Prototype Pollution a flaw where an attacker can manipulate the prototype of an object to inject...
PT-2026-32817
🪟 CVE-2026-32091 is Microsoft doing “local admin? nah, brokering says hi.” File-system boundary breaks mean normal users become SYSTEM—so patch fast. Your PC isn’t a vault. https://t.co/sP4cfWdFlj BrokeringFileSystem LocalPrivilegeEscalation WindowsVulnerability https://t.co/qNgRX2zQ6g...
PT-2026-32758
Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use after free issue in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that...
PT-2026-32733
CVE-2026-26153 Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally. https://t.co/JzUOIc3hba...
Microsoft Windows Encrypting File System Buffer Error Vulnerability
Microsoft Windows Encrypting File System is a feature introduced by Microsoft’s Windows operating system in NTFS 3.0. It provides file system-level encryption. There is a buffer error vulnerability in Microsoft Windows Encrypting File System EFS. Attackers can exploit this vulnerability to gain...
Microsoft Projected File System Resource Management Vulnerability
The Microsoft Projected File System is an application system developed by Microsoft Corporation. It projects hierarchical data into the file system, making it appear as files and directories within the file system. The Microsoft Projected File System has a resource management vulnerability...
Microsoft Projected File System Resource Management Vulnerability
The Microsoft Projected File System is an application system developed by Microsoft Corporation. It projects hierarchical data into the file system, making it appear as files and directories within the file system. There is a resource management vulnerability in the Microsoft Windows Projected Fi...
Microsoft Brokering File System Resource Management Vulnerability
Microsoft Brokering File System is a file system from the American company Microsoft. A security vulnerability exists in Microsoft Brokering File System. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Windows Container Isolation FS Filter Driver Resource Management Error Vulnerability
The Microsoft Windows Container Isolation FS Filter Driver is an application developed by Microsoft Corporation. It is a driver for container isolation. There is a resource management vulnerability present in the Microsoft Windows Container Isolation FS Filter Driver. Attackers can exploit this...
CVE-2026-27299: Improper Input Validation
Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to access sensitive files or data on the system. Exploitation of this issue requires user interactio...
CVE-2026-32069: Double Free
Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-27927: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Projected File System allows an authorized attacker to elevate privileges locally...
Huawei HarmonyOS File System Out-of-Bounds Write Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds write vulnerability exists in the Huawei HarmonyOS file system, which can be exploited by an attacker to cause availability to be compromise...
PT-2026-32862
Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A double free issue in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. A double free occurs when a program attempts to fre...
KLA90980 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a...
Microsoft Brokering File System Resource Management Vulnerability
The Microsoft Brokering File System is a file system developed by Microsoft Corporation. There is a resource management vulnerability in the Microsoft Brokering File System. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windo...
PT-2026-33229
Name of the Vulnerable Software and Affected Versions goshs versions prior to 2.0.0-beta.6 Description goshs contains an SFTP root escape caused by prefix-based path validation. An authenticated SFTP user can read from and write to filesystem paths outside the configured SFTP root, breaking the...
ROS-20260414-73-0061
A vulnerability in the f2fsdecompresscluster function of the fs/f2fs/compress.c module of the F2FS file system of the Linux kernel is related to insufficient resource locking. Exploitation of the vulnerability may allow an intruder to affect the integrity and availability of protected information...