1706 matches found
PT-2026-92366
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-92303
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, requiring only user executi...
PT-2026-92359
In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
PT-2026-92339
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A permission bypass exists in multiple files caused by a confused deputy, a situation where a privileged entity is tricked by a less privileged one into...
PT-2026-92345
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...
PT-2026-93121
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authentication bypass allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by...
PT-2026-92313
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A use-after-free condition exists in multiple locations caused by improper locking. This issue allows for local escalation of privilege without requiring...
PT-2026-92338
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...
PT-2026-92325
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in multiple locations may lead to a use-after-free scenario, where the system continues to use a pointer after the memory it points to has been...
PT-2026-92360
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in multiple locations may lead to a use-after-free scenario, where the system continues to use a memory address after it has been freed. This...
PT-2026-92297
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in multiple locations may lead to a use-after-free scenario, where the system continues to use a pointer after it has been freed. This could all...
PT-2026-92329
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code across multiple locations allows for a local escalation of privilege. This issue enables an attacker to gain System execution privileg...
kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init()
A flaw was found in the Linux kernel's drm/xe/pt module. During certain memory management operations, an internal counter is not properly reset. Repeated attempts to perform these operations, possibly due to resource contention or out-of-memory conditions, can cause this counter to exceed its...
PT-2026-90522
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A file-upload handler redirects the authenticated client's browser to a URL sourced directly from the Referer header of the request without validating it agains...
PT-2026-90513
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain...
PT-2026-89069
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...
PT-2026-89102
CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint...
PT-2026-88806
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...