CVE-2026-14478

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14479

CVE-2026-14479 affects the Autodesk Installer IPC frame parser. A maliciously crafted input can cause improper validation of an input-specified position or offset, producing an out-of-range substring operation. The resulting condition may cause the NT AUTHORITY\SYSTEM service to terminate, yieldi...

EUVD-2026-57239

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14479 Denial of Service in Autodesk Installer IPC Channel

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

EUVD-2026-57238

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478

The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...

kernel: Kernel: Privilege escalation and denial of service via integer truncation in accel/ivpu

A flaw was found in the Linux kernel's accel/ivpu component. A local attacker could exploit a signed integer truncation vulnerability in the Inter-Process Communication IPC receive path. This flaw occurs when a firmware-supplied data size is incorrectly converted, leading to an oversized memory...

ALSA-2026:54443 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 Bug Fixes and...

PT-2026-71097

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITYSYSTEM...

PT-2026-71096

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A local low-privileged attacker can execute a maliciously created executable on a victim's machine to inject unauthenticated Inter-Process Communication IPC...

Oracle Linux 10 : kernel (ELSA-2026-53330)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53330 advisory. - mm/slab: do not limit zeroing to origsize when only red zoning is enabled Rafael Aquini RHEL-223405 CVE-2026-64368 - net: openvswitch: reject...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 Bug Fixes and...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...