92662 matches found
CVE-2026-105390
The OpenVPN ovpn-dco-win component for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 is vulnerable to a deadlock caused by improper synchronization . A local attacker can trigger this condition by performing a crafted write to the ovpn-dco device , which results in the host becomin...
MAL-2026-17879 Malicious code in @flexmr/ui (npm)
@flexmr/[email protected] runs node beacon.js preinstall, node beacon.js install, and node beacon.js postinstall during installation. These lifecycle scripts send the package name, lifecycle event, a fixed token, and host identity details to 177.7.60.239:48080 and encode the hostname in a DNS query und...
Malicious code in @flexmr/ui (npm)
@flexmr/[email protected] runs node beacon.js preinstall, node beacon.js install, and node beacon.js postinstall during installation. These lifecycle scripts send the package name, lifecycle event, a fixed token, and host identity details to 177.7.60.239:48080 and encode the hostname in a DNS query und...
CVE-2026-96248
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network...
CVE-2026-88072
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
CVE-2026-87709
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...
CVE-2026-85927
Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-85918
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-85375
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-85373
Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-86063 Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Gi...
CVE-2026-88072
A vulnerability in Windows Host Guardian Service involves improper access control that allows an authorized attacker to achieve local privilege escalation . The root cause is associated with CWE-59 (Improper Link Resolution Before File Access). The impact includes high levels of confidentiality, ...
EUVD-2026-100080
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-100075
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...
CVE-2026-87709
A vulnerability exists in the Windows Host Guardian Service due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-250 (Execution with Unnecessary Privileges) . While the technical root cause is not detailed...
CVE-2026-96248
A stack-based buffer overflow exists in the Windows Host Guardian Service , which could allow an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 and has been assigned a High base severity score of 7.5. Remediation is...
EUVD-2026-99758
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network...
CVE-2026-85927
A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the documents confirm the existence of the flaw and its impact on local security, specific details regardi...