29721 matches found
CVE-2026-52486
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
PT-2026-87586
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87662
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
PT-2026-87196
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...
CVE-2026-52486
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
PT-2026-88338
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
EUVD-2026-74266
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
PT-2026-87333
Name of the Vulnerable Software and Affected Versions Windows USB Audio Class driver usbaudio.sys affected versions not specified Description An out-of-bounds read in the usbaudio.sys driver allows an authorized attacker to disclose sensitive information locally, which may impact the system...
PT-2026-87602
Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
NewStart CGSL MAIN 7.02 : perl Vulnerability (NS-SA-2026-0098)
The remote NewStart CGSL host, running version MAIN 7.02, has perl packages installed that are affected by a vulnerability: - Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide...
PT-2026-88614
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Views allows a local attacker to execute arbitrary code outside the sandbox via a local program. Use after free is a memory corruption flaw that occurs when an...
PT-2026-88633
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in DevTools allows a local attacker to execute arbitrary code outside the sandbox via a local program. Use after free is a memory corruption flaw that occurs when...
NewStart CGSL MAIN 7.02 : librabbitmq Vulnerability (NS-SA-2026-0102)
The remote NewStart CGSL host, running version MAIN 7.02, has librabbitmq packages installed that are affected by a vulnerability: - An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for...
Microsoft Windows Link Following Vulnerability
Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...
AZL-99993 CVE-2026-86469 affecting package glib 2.78.6-11
A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...
DEBIAN-CVE-2026-86469
A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...
CVE-2026-86469
A race condition flaw in GLib2 's g_file_replace() function allows a local attacker with write access to the destination directory to redirect file writes to an arbitrary file. When the ".goutputstream-XXXXXX" temporary file creation fails, the library unlinks and recreates the destination withou...
CVE-2026-86138
A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...
CVE-2026-53801
A symlink race condition in rsync's sender directory scanning logic allows a local attacker to bypass intended access restrictions. By replacing a symlink with a directory entry pointing outside the module root during an active scan, the attacker can force rsync to enumerate and transfer...
CVE-2026-53798
A privilege confusion vulnerability in rsync's name-converter subprocess allows a local attacker to achieve privilege escalation. By manipulating the subprocess to return empty values for uid or gid lookups, the attacker forces rsync to incorrectly interpret these as root uid/gid 0. Consequently,...