8715 matches found
EUVD-2026-44591
The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer...
Installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries
Overview The installer of HYPER SBI 2 provided by SBI SECURITIES Co., Ltd. insecurely loads Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-42936 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...
CVE-2026-61449: Improper Handling of Highly Compressed Data (Data Amplification)
Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM\Installer. The size bound introduced in 2.0.1 sums the uncompressed size declared in each entry's ZIP central-directory header ZipArchive::statIndex'size' and rejects archives exceeding...
PT-2026-60270
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
PT-2026-58878
The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer...
CVE-2026-42936: Uncontrolled Search Path Element
The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer...
PT-2026-60144
Name of the Vulnerable Software and Affected Versions Grav version 2.0.1 Description A decompression-bomb size-cap bypass exists in ZipArchiver and GPMInstaller. The system calculates the uncompressed size by summing the values declared in each entry's ZIP central-directory header via...
EUVD-2026-44104
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-43863
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-43974
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-43973
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-58540
Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-50490
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-50400
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-48571
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-48572
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-58540
CVE-2026-58540 is a Windows Installer elevation-of-privilege vulnerability. The issue arises from improper authorization in Windows Installer, enabling a locally authenticated attacker to gain elevated privileges. CVSSv3.1 metrics (Microsoft-supplied) indicate a local attack vector, low attack co...
CVE-2026-58540 Windows Installer Elevation of Privilege Vulnerability
...
