CVE-2026-109106

A path traversal vulnerability exists in Polaris Office App 9.9.19 on Android within the Document Intake component. The flaw is triggered by manipulating the _display_name argument in the com.infraware.service.m.n.a function. This vulnerability requires local access to exploit. A public exploit i...

Review.CVE-2021-3156

👑 CVE-2021-3156 Baron Samedit — Privilege Escalation via Heap Overflow in sudo 📅 Date: 2025-06-08 ✍️ Author: @TopskiyPavelQwertyGang 🧠 Security Researcher | Red Team Enthusiast 🧠 CVE Overview CVE-ID: CVE-2021-3156 Type: Heap-based Buffer Overflow Component: sudoedit sudo Access Level: Local Goal:...

CVE-2026-108955

A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function ggufinitfromfile of the file ggml.c of the component GGUF Parser. This manipulation of the argument dataoffset causes out-of-bounds read. The attack requires local access...

CVE-2026-108955 Tiiny-AI PowerInfer GGUF ggml.c gguf_init_from_file out-of-bounds

A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function ggufinitfromfile of the file ggml.c of the component GGUF Parser. This manipulation of the argument dataoffset causes out-of-bounds read. The attack requires local access...

CVE-2026-108955

The Tiiny-AI PowerInfer software is vulnerable to an out-of-bounds read within the GGUF Parser component. Specifically, a manipulation of the data_offset argument in the gguf_init_from_file function of the ggml.c file causes this issue. The vulnerability requires local access to exploit. Although...

EUVD-2026-98234

A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function ggufinitfromfile of the file ggml.c of the component GGUF Parser. This manipulation of the argument dataoffset causes out-of-bounds read. The attack requires local access...

CVE-2026-89121

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not...

CVE-2026-89121

SAP S/4HANA is vulnerable to a missing authorization check within the Linear Asset Management RAP Business Object . The root cause is the system's failure to perform sufficient instance-level authorization checks during certain modification operations on associated business object data. An attack...

EUVD-2026-98200

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not...

CVE-2026-89121 Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not...

PT-2026-111580

Name of the Vulnerable Software and Affected Versions AMI APTIOV affected versions not specified Description Local access allows users to trigger a Buffer Access with Incorrect Length Value in the BIOS. This issue can lead to buffer overflows, memory corruption, and arbitrary code execution,...

CVE-2026-89121: Missing Authorization

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not...

CVE-2026-109106: Improper Limitation of a Pathname to a Restricted Directory

A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function com.infraware.service.m.n.a of the component Document Intake. The manipulation of the argument displayname results in path traversal. The attack is only possible with local...

CVE-2026-0893: Exposure of Sensitive Information Due to Incompatible Policies

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality,...

CVE-2025-58773: Out-of-bounds Write

AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

CVE-2026-85812: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally...

CVE-2026-96857: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...

PT-2026-111145

Name of the Vulnerable Software and Affected Versions SAP S/4HANA affected versions not specified Description Insufficient instance-level authorization checks for certain modification operations on associated business object data allow an attacker with low privileges and local access to bypass...

PT-2026-111578

Name of the Vulnerable Software and Affected Versions AMI APTIOV affected versions not specified Description Local access allows users to trigger a classic buffer overflow in the BIOS. This issue can lead to memory corruption and the execution of arbitrary code, impacting the confidentiality,...

CVE-2026-108361

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload code, data, and configuration at any time after successful connection establishment. Once Evidence was successfully...