CVE-2026-11744 PaperCut Hive Embedded App for Ricoh: Javascript injection

An input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sanitize input received during the NFC card reading process before passing it to the application's web view interface. A local attacker with physical access to t...

SUSE CVE-2026-92747

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine VM credentials, such as rootPassword and userPassword. This occurs when the installmachine.py script passes these credentials as...

SUSE CVE-2026-92768

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

SUSE CVE-2026-95295

Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical access. Chromium security severity: Medium...

CVE-2026-93586

A flaw was found in ImageMagick. A use-after-free vulnerability exists in the ImagesToBlob method due to an incorrectly updated pointer. A local attacker could exploit this vulnerability, leading to a limited availability impact, such as a crash of the affected process. Mitigation To mitigate thi...

EUVD-2026-84954

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials...

EUVD-2026-84960

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...

EUVD-2026-84875

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images...

Linux Distros Unpatched Vulnerability : CVE-2026-91717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-install...

CVE-2026-19087: Execution with Unnecessary Privileges

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to improper privilege management...

CVE-2026-15915

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images...

CVE-2026-18124

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability where a local attacker can obtain sensitive information due to insufficiently protected credentials (CWE-522 ). This issue affects versions 4.0.6.0 through 4.0.10.0 (including specific iFix releases). The ...

CVE-2026-17647 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...

tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During...

CVE-2026-95818

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...

UBUNTU-CVE-2026-95818

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...

EUVD-2026-84558

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...

CVE-2026-19915 HP Support Assistant - Local Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2026-19915

HP Support Assistant versions prior to 9.55.10.0 contain a local privilege escalation vulnerability caused by insufficient access controls . A local attacker with low privileges can exploit this without user interaction to achieve high impact on the system's confidentiality, integrity, and availa...

EUVD-2026-84500

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...