502 matches found
CVE-2026-78892
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. Chromium security severity: Medium...
CVE-2026-72180
A flaw was found in the Linux kernel's huge memory management mm/hugememory. When a device-private Page Middle Directory PMD is downgraded, the pmdswpuffdwp bit, which indicates Userfault File Descriptor Write Protect UFFDWP, is not properly preserved. This oversight allows a local attacker to...
CVE-2026-69278
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-54981: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
PT-2026-70785
Name of the Vulnerable Software and Affected Versions Dozzle versions 10.5.2 through 10.6.14 Description The isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, utilized by safeDialContext for webhook notification URLs, fails to inspect IPv4 addresses embedded within 6to4, NAT6...
PT-2026-68970
Impact On macOS, the check Electron uses to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that enable the fuse-based hardening restricting ELECTRON RUN AS NODE and NODE OPTIONS to same-signed parents rely on this check; a local attacker could...
CVE-2026-55626
xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this...
CVE-2026-55626
xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this...
EUVD-2026-43923
Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-43846
Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally...
EUVD-2026-43842
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally...
EUVD-2026-43993
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-58638
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...
CVE-2026-58545
Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally...
CVE-2026-57101
Improper neutralization of input during web page generation 'cross-site scripting' in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-50418
Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-50303
Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally...
CVE-2026-49783
Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...