CVE-2026-85918

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a high severity base score of 7.0. No specific exploit information or remediation de...

CVE-2026-85373

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the general ...

CVE-2026-85375

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host component. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause analysis beyond the vulnerability type are provided in the...

EUVD-2026-99497

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

EUVD-2026-99499

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

litebox-snp-fixed-crng

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · litebox-snp-fixed-crng litebox-snp-fixed-crng Class: Crypto / Predictable RNG Reach: Local guest-vs-host LiteBox v0.1.0 d8556e3 - Microsoft SnpLinuxKernel::fillbytescrng is a process-global FastRng constructed with...

CVE-2026-54454

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in modules/import/ImportUI.php can preserve an uploaded file's original name for one import data type and place the file in the web-accessib...

CVE-2026-106034

A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system...

EUVD-2026-98924

The AVDTP signalling layer arms a 6-second command timeout AVDTPTIMEOUT in avdtpsendcmd whenever the local device issues an AVDTP request. Every response handler in subsys/bluetooth/host/classic/avdtp.c cancels session-timeoutwork before clearing the pending request, but btavdtpl2capdisconnected...

CVE-2026-54454 OpenCATS: Authenticated RCE in the Import module

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in modules/import/ImportUI.php can preserve an uploaded file's original name for one import data type and place the file in the web-accessib...

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-106034

A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system...

CVE-2026-106034

A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system...

CVE-2026-106034

A Path Traversal vulnerability exists in Ivanti Xtraction before version 2026.4 . This flaw allows a remote authenticated attacker to create or modify arbitrary directories on the host file system. The vulnerability is categorized under CWE-22: Improper Limitation of a Pathname to a Restricted Di...

Hyland Desktop Host Permission Licensing and Access Control Vulnerabilities

Hyland Desktop Host for Windows versions prior to 25.1.1 have a vulnerability related to permission permissions and access control. This vulnerability arises from privileged services running with low privileges from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder, which may allow local users to...

Portkey Gateway server request forgery vulnerability

Portkey Gateway version 1.14.0 to 1.15.2 has a server-side request forgeing vulnerability. This vulnerability arises from the isValidCustomHost function, which trusts the localhost-style host when TRUSTEDCUSTOMHOSTS is not set. Additionally, the x-portkey-custom-host header is not validated. As a...

Windows Host Guardian Service Denial of Service Vulnerability

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network...

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...