1496 matches found
MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal
MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 = Maintenance Pack 36 with Servicepack 8 week 36/2025 contain an unauthenticated local file disclosure vulnerability caused by improper validation of the "Filename" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows ...
CVE-2026-20496
In geniezone, a potential out-of-bounds read results from a missing bounds check, risking local information disclosure when an attacker already has the System privilege. Exploitation reportedly does not require user interaction. The mitigation provided in the sources is Patch ID ALPS11036877 (Iss...
CVE-2026-20489
CVE-2026-20489 concerns an information disclosure in display due to an integer overflow. The issue could lead to local disclosure if an attacker already has System privileges, with no user interaction required. A patch is identified as ALPS11004274 (MSV-7749). The connected sources do not specify...
EUVD-2026-52079
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749...
EUVD-2026-52078
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757...
CVE-2026-43665
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A local attacker may be able to determine the legacy VNC password configured for Screen Sharing...
CVE-2026-57083
Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally...
CVE-2026-57084
Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally...
CVE-2026-55050
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-55035
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-50681
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
CVE-2026-50657
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally...
CVE-2026-50483
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally...
CVE-2026-50473
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...
CVE-2026-50455
Use of uninitialized resource in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
CVE-2026-50456
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...
CVE-2026-50442
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...
CVE-2026-50434
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...