CVE-2026-21265

Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes...

CVE-2026-20824

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

UBUNTU-CVE-2025-71130

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915gemdoexecbuffer Initialize the eb.vma array with values of 0 when the eb structure is first set up. In particular, this sets the eb-vmai.vma pointers to NULL, simplifying...

CVE-2025-71108 usb: typec: ucsi: Handle incorrect num_connectors capability

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect numconnectors capability The UCSI spec states that the numconnectors field is 7 bits, and the 8th bit is reserved and should be set to zero. Some buggy FW has been known to set this bit, and it...

CVE-2025-46068

An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanism...

EUVD-2026-2046

A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of internal operations. Successful exploit could allow an authenticated malicious actor to execute commands with the privilege...

CVE-2026-20824

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-20824

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

Windows Remote Assistance Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

PT-2026-2674

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A security feature bypass exists in Windows Remote Assistance. This allows an unauthorized attacker to bypass a security feature locally. The issue involves a failure in a protection mechanis...

CVE-2025-46068

An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanism...

CVE-2025-46068

An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanism...

Automai Director 安全漏洞

Automai Director is a centralized automation management console from Automai Corporation. A security vulnerability exists in Automai Director version 25.2.0, which can be exploited by a remote attacker to execute arbitrary code via an update mechanism...

PT-2026-2275

Name of the Vulnerable Software and Affected Versions Automai Director version 25.2.0 Description An issue allows a remote attacker to execute arbitrary code via the update mechanism. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

EUVD-2026-1928

An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanism...

CVE-2025-46068

CVE-2025-46068 affects Automai Director v.25.2.0. Multiple sources (NVD, Red Hat, CNNVD, CVE listings) describe a remote code execution via the product’s update mechanism. The provided documents do not detail the underlying root cause, affected subcomponents, exploit specifics, or a remediation/p...

CVE-2025-46068

An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanism...

CVE-2025-46068

An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanism...

CVE-2021-22460

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...

CVE-2021-22731

Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM and MCSESP V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a remote attacker...