CVE-2026-9055

CVE-2026-9055 — Amelia Booking Plugin Élévation de privilèges non authentifiée Analyse rédigée par Sentinel AI Defense. Analyse défensive uniquement — aucun exploit fonctionnel ni PoC n'est publié ici pour cette vulnérabilité. Une vulnérabilité d'élévation de privilèges non authentifiée dans le...

SUSE CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-62183

CVE-2026-62183 — Élévation de privilèges via le libre-service utilisateur d'Apache Syncope Improper Privilege Management CWE-269 dans Apache Syncope. Un utilisateur authentifié à faibles privilèges peut s'octroyer des rôles arbitraires ainsi que des appartenances à des groupes, des ressources...

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84358

CVE-2026-84358 is a Medium -severity improper privilege management flaw in the Downloads component of Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process could use a crafted HTML page to spoof the address bar , potentially misleading users int...

CVE-2026-84115 Cleo Harmony JWT Refresh Token connections privileges management

A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Performing a manipulation of the argument Bearer results in improper privilege management. The attack is possible to be...

CVE-2026-82807

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly...

CVE-2026-82807 ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly...

CVE-2026-82671

A vulnerability has been found in IObit Unlocker 1.3.0.12. This vulnerability affects the function ZwTerminateProcess in the library IObitUnlocker.sys of the component IRPMJDEVICECONTROL Handler. The manipulation leads to improper privilege management. An attack has to be approached locally. The...

EUVD-2026-68454

A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRPMJDEVICECONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 تصعيد غير مصادق عليه للصلاحيات عبر حقن الدور === Beelze zeroday 1diot9 === 📋 معلومات الثغرة الحقل| التفاصيل ---|--- معرف CVE| CVE-2026-5118 درجة CVSS| 9.8 حرجة ناقل CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-269 — إدارة غير سليمة للصلاحيا...

CVE-2026-13610

CVE-2026-13610 KiviCare – Sistema di gestione di cliniche e pazienti CWE-269 Gestione impropria dei privilegi | Registrazione non autenticata con ruolo del personale scelto dall'attaccante → divulgazione delle PHI dei pazienti Panoramica Vulnerabilità critica nel plugin WordPress KiviCare – Siste...

Chromium: CVE-2026-79226 Improper privilege management in Regional Capabilities

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79276 Improper privilege management in FileSystem

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Linux Distros Unpatched Vulnerability : CVE-2026-79226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...

CVE-2026-79276

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-78999

An improper privilege management flaw in the Navigation component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, who had already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside the sandbox via a crafted HTML page. The NVD-as...