542 matches found
CVE-2022-26337
Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000397)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000397 advisory. A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause t...
PT-2026-1388
Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to an integer overflow. Successful exploitation could allow a malicious actor to gain local system privileges, but requires the attacker to already hav...
kernel: ext4: fix undefined behavior in bit shift for ext4_check_flag_values
A vulnerability was identified in the Linux kernel's ext4 filesystem implementation due to a flaw in how it processes filesystem metadata. An attacker with local privileges could create a malicious ext4 filesystem image to trigger this issue. When the system attempts to mount this malicious image...
AnyDesk 代码问题漏洞
AnyDesk is a remote desktop connection software from AnyDesk Germany. A code issue vulnerability exists in AnyDesk versions 7.0.15 and 9.0.1, which stems from an unquoted service path that could lead to code execution by a local, unprivileged user with SYSTEM privileges...
kernel: ext4: fix undefined behavior in bit shift for ext4_check_flag_values
A vulnerability was identified in the Linux kernel's ext4 filesystem implementation due to a flaw in how it processes filesystem metadata. An attacker with local privileges could create a malicious ext4 filesystem image to trigger this issue. When the system attempts to mount this malicious image...
CVE-2025-59514
Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
PT-2025-46315
Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools for Mac BEST versions prior to 7.20.52.200087 Description A configuration issue in Bitdefender Endpoint Security Tools for Mac BEST allows local users with administrative privileges to bypass the uninstall...
PT-2025-44988
Name of the Vulnerable Software and Affected Versions Huawei Charger affected versions not specified Description The charger contains a flaw where a missing bounds check can lead to an out-of-bounds write. Successful exploitation of this issue could allow a malicious actor to gain local system...
CVE-2025-59202
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2025-57716
An Uncontrolled Search Path Element vulnerability CWE-427 in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder...
CVE-2025-20724
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418894; Issue ID: MSV-3475...
PT-2025-42039
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A use-after-free condition exists in Windows PrintWorkflowUserSvc, potentially allowing a locally authorized attacker to gain elevated privileges. This issue presents a low-complexit...
PT-2025-42155
Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An improper access control issue exists in Azure Monitor Agent. An authorized attacker can elevate privileges locally. Recommendations At the moment, there is no information about...
MediaTek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could result in out-of-bounds writes and could lead to local elevation of privilege if a malicious attacker ha...
CVE-2025-21044
CVE-2025-21044 relates to an out-of-bounds write in the SAMSUNG fingerprint trustlet, prior to SMR Oct-2025 Release 1. The issue allows a locally privileged attacker to write memory outside allocated boundaries. Affected component: fingerprint trustlet; impact includes potential memory corruption...
EUVD-2006-0053
Malware in sbrugna...
EUVD-2004-0134
Malware in sbrugna...