Lucene search
+L

2880 matches found

Snyk
Snyk
added 2026/08/11 7:04 p.m.17 views

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

7.8CVSS5.4AI score0.00288EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/08/11 7:04 p.m.17 views

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...

7.8CVSS5.4AI score0.00288EPSS
SaveExploits0References5Affected Software8
OSV
OSV
added 2026/08/11 7:04 p.m.9 views

GHSA-9MR8-PWPW-3J2W Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...

6.7CVSS5.4AI score0.00288EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/11 2:17 p.m.24 views

CVE-2026-48056

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...

10CVSS0.00479EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/11 1:52 p.m.10 views

EUVD-2026-56148

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...

10CVSS5.6AI score0.00479EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/11 1:52 p.m.20 views

CVE-2026-48056 Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...

10CVSS5.7AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/11 1:52 p.m.42 views

CVE-2026-48056 Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...

10CVSS0.00479EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/11 1:52 p.m.13 views

CVE-2026-48056

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...

10CVSS5.6AI score0.00479EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/08/11 1:52 p.m.51 views

CVE-2026-48056

Streambert (Electron desktop app) versions prior to 2.5.0 are vulnerable due to improper validation of executable paths in the run-download IPC handler, enabling a compromised renderer to execute arbitrary local binaries with the application’s privileges. Version 2.5.0 patches this. No exploitati...

10CVSS5.6AI score0.00479EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/11 1:08 p.m.46 views

CVE-2026-48046 Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote...

9.3CVSS0.00347EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/11 1:08 p.m.58 views

CVE-2026-48046

Vulnerability summary for CVE-2026-48046: Streambert (Electron desktop app) is affected in versions prior to 2.5.0 by an unvalidated auto-updater URL handled via IPC. A compromised renderer process can trigger the main process to download and execute an arbitrary binary, resulting in remote code ...

9.3CVSS5.9AI score0.00347EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/11 10:11 a.m.13 views

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

7.8CVSS5.3AI score0.00157EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.10 views

PT-2026-70207

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...

10CVSS5.6AI score0.00479EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/10 2:17 p.m.32 views

AZL-95646 CVE-2026-15059 affecting package systemd-bootstrap for versions less than 250.3-20

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

5.5CVSS5.9AI score0.00119EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/10 2:17 p.m.11 views

DEBIAN-CVE-2026-15059

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

5.5CVSS5.5AI score0.00119EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/10 2:17 p.m.10 views

AZL-95640 CVE-2026-15059 affecting package systemd for versions less than 255-34

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

5.5CVSS5.9AI score0.00119EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/10 2:17 p.m.15 views

CVE-2026-15059

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

5.5CVSS0.00119EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/10 1:02 p.m.10 views

CVE-2026-15059

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

5.5CVSS5.4AI score0.00119EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/08/10 10:40 a.m.13 views

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

7.8CVSS5.3AI score0.00157EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/10 5:43 a.m.13 views

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

7.8CVSS5.3AI score0.00157EPSS
SaveExploits0References5
Rows per page
Query Builder