29721 matches found
PT-2026-88652
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description Missing authorization in TrustedWebActivities allows a local attacker to obtain sensitive information through a co-installed application. Recommendations Update Google Chrome...
PT-2026-88824
Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
PT-2026-88825
Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-86424
A flaw was found in ImageMagick. This time-of-check-time-of-use TOCTOU vulnerability, involving a symlink race in the video decoder, allows a local attacker with low privileges to bypass path policy write restrictions. By replacing a symbolic link between the security check and the actual file...
CVE-2026-86141
A NULL pointer dereference in libxml2's xmlRegNewParserCtxt function allows a local attacker to cause a denial of service DoS. The flaw occurs when strlen is called on an unverified pointer following a failed xmlStrdup memory allocation, resulting in a process crash...
CVE-2026-52486
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
CVE-2026-73000
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-73003
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-69421
Integer underflow wrap or wraparound in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-68824
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
libvirt: swtpm privilege escalation via symlink following
A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...
CVE-2026-81391
CVE-2026-81391 is an information disclosure vulnerability in Microsoft Office Excel caused by a use of uninitialized resource . An unauthorized local attacker with user interaction can disclose information, rated CVSS 5.5 (Medium) with high confidentiality impact but no integrity or availability ...
EUVD-2026-73858
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service
A flaw was found in libexpat. The library's handling of custom encoding callbacks lacks proper tracking of handler call depth, which can lead to a use-after-free vulnerability. This memory corruption flaw could allow a local attacker to cause a denial of service or potentially execute arbitrary...
EUVD-2026-73464
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally...
EUVD-2026-73455
Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...
EUVD-2026-73085
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally...
EUVD-2026-73073
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally...