CVE-2026-113720 virtualenv: Seeded files retain permissions from an older cache

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...

CVE-2026-113720

The virtualenv tool (prior to version 21.14.9 ) contains a vulnerability where the app-data copy seeder uses shutil.copy() to move cached package files into new environments. This causes files to retain source modes from a previous cache, potentially overriding the current run's umask . If the ca...

CVE-2026-113720 virtualenv: Seeded files retain permissions from an older cache

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...

CVE-2026-113720 virtualenv: Seeded files retain permissions from an older cache

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to a permission issue...

CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-80929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sysctl: move the cadpid entry from pidtable to kernreboottable cadpid is global, and killcadpid is only used in the root namespace. However, due to...

EUVD-2026-42695

Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation...

CVE-2026-43657

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps...

SUSE CVE-2026-19200

The Velociraptor verify VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifact repository is used which allows callers to overwrite existing artifacts without the required permissions. The attacker...

CVE-2026-75978

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...

CVE-2026-75978 xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...

CVE-2026-75978

In xianrendzw EasyReport up to 2.0.17.0522_Beta, the function DataSourceController.add in DataSourceController.java allows remote manipulation of the queryerClass argument, causing permission issues exploitable with low privileges; no vendor patch is available yet, and a PoC has been disclosed pu...

CVE-2026-75978 xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...

PT-2026-78252

Name of the Vulnerable Software and Affected Versions xianrendzw EasyReport versions prior to 2.0.17.0522 Beta Description A remote issue exists within the QueryerFactory component in the DataSourceController.add function of the DataSourceController.java file. Manipulating the queryerClass argume...

CVE-2026-19376 Uasoft Badaso File API api.php class permission

A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-19376

Uasoft Badaso 3.0.0-alpha is affected. The vulnerability targets the ApiRequest::class in the file src/Routes/api.php of the File API, causing permission issues. It can be exploited remotely, and the exploit has been disclosed publicly. The project was informed via an issue report but has not res...

CVE-2026-19376

A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-19376 Uasoft Badaso File API api.php class permission

A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-19191 StableBit DrivePool DrivePoolService DrivePool.Service.exe permission

A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\DrivePool\DrivePool.Service.exe of the component DrivePoolService. Such manipulation leads to permission issues. The attack must be carried...