CVE-2026-67071 HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure valu...

CVE-2026-67071: Improper Removal of Sensitive Information Before Storage or Transfer

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure valu...

PT-2026-95106

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure valu...

EUVD-2026-80034

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntoolsstartsetcgi, ntoolstcpdumpstartsetcgi, exedefault, and ntoolsproc components. Attackers can inject crafted arguments into these tcpdump launch routines ...

CVE-2026-76862

Netcore NR255-V (version 1.5.130703) is affected by an OS command argument injection vulnerability in the Nettools tcpdump launch paths , specifically the ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc components. An authenticated attacker (low privileges) can in...

CLSA-2026-1789465375 TuxCare security update for launch-editor (2 CVEs)

TuxCare rebuilt launch-editor to address 2 CVEs. Fixed in 2.2.1-tuxcare.1...

CVE-2026-76862: Improper Neutralization of Argument Delimiters in a Command

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntoolsstartsetcgi, ntoolstcpdumpstartsetcgi, exedefault, and ntoolsproc components. Attackers can inject crafted arguments into these tcpdump launch routines ...

PT-2026-99025

TuxCare rebuilt launch-editor to address 2 CVEs. Fixed in 2.2.1-tuxcare.1...

Astra Linux – Vulnerability in virglrenderer

A NULL pointer dereferencing in the vrendrenderer.c file of virglrenderer during versions 0.8.1 allows attackers to cause a denial of service by using commands that attempt to launch a grid without first providing a Compute Shader CS...

Astra Linux – Vulnerability in LibreOffice

In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist can be circumvented by manipulating the link so that it does not match the denylist, resulting in ShellExecute attempting to launch an executable file...

ROOT-APP-NPM-CVE-2024-52011 CVE-2024-52011 in launch-editor - Patched by Root

Root has patched CVE-2024-52011 in the launch-editor package for Root:npm. Multiple fixed versions available...

CVE-2026-21112

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

CVE-2026-21100

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...

CVE-2026-21112

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

EUVD-2026-74653

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

CVE-2026-21112

CVE-2026-21112 is an improper input validation flaw in Samsung Tips prior to Android 17 . A local attacker with low privileges can launch an arbitrary activity with Samsung Tips privilege , resulting in high confidentiality impact on the vulnerable system. User interaction is required to trigger ...

CVE-2026-21100

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...

EUVD-2026-74641

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...

CVE-2026-21097

Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity...

CVE-2026-21097

CVE-2026-21097 is an improper authentication flaw in Samsung Mobile's ActivityTaskManagerService , present prior to SMR Sep-2026 Release 1 . A local privileged attacker can exploit it to launch an arbitrary activity , resulting in low impact to confidentiality, integrity, and availability on the ...