Input Leap Arbitrary Command Execution

Missing authentication for a critical function in the input-leapd daemon of Input Leap, the open-source keyboard and mouse sharing tool, allows a local, low-privileged user on Windows to execute arbitrary commands as NT AUTHORITY\SYSTEM by sending a single IPC command message to the daemon's...

CVE-2026-95624

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

CVE-2026-95624 Tauri framework v2 malicious downgrade via allow_downgrades from frontend code

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

EUVD-2026-84577

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

CVE-2026-95624

The Tauri updater plugin is vulnerable to a malicious downgrade attack because the 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When this parameter is set to true , it changes the version comparator from "update must be newer" to "update...

CVE-2026-95624 Tauri framework v2 malicious downgrade via allow_downgrades from frontend code

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

CVE-2026-95624 Tauri framework v2 malicious downgrade via allow_downgrades from frontend code

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

PT-2026-96856

Name of the Vulnerable Software and Affected Versions Tauri affected versions not specified Description The updater plugin contains a flaw where the 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When this parameter is set to true, the...

CVE-2026-95624: Improper Access Control

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

Cisco AnyConnect Secure Mobility Client IPC Command File Modification Vulnerability

Cisco AnyConnect Secure Mobility is a secure enterprise mobility solution. Cisco AnyConnect Secure Mobility Client fails to properly validate IPC commands, allowing a local attacker to exploit the vulnerability to modify arbitrary files with elevated privileges...