CVE-2026-65103: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target,...

CVE-2026-109756: Improper Privilege Management

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-65199: Incorrect Privilege Assignment

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In routemapper/account.lua, getuserprivilege returns the complete nine-privilege set...

CVE-2026-53418: Improper Authorization in Handler for Custom URL Scheme

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

PT-2026-111498

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description Privilege escalation exists within the WebExtensions component. Recommendations Update Firefox ...

PT-2026-111425

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description Privilege escalation exists within the Application Update component. Recommendations Update...

PT-2026-113088

Name of the Vulnerable Software and Affected Versions Windows Update affected versions not specified Description A use after free issue in Windows Update allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continu...

PT-2026-112439

Name of the Vulnerable Software and Affected Versions Windows Geotag Broker affected versions not specified Description Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege impact on the system...

UBUNTU-CVE-2026-70161

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-70165

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-70175

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...

UBUNTU-CVE-2026-70179

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

UBUNTU-CVE-2026-70183

Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

UBUNTU-CVE-2026-85363

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...

UBUNTU-CVE-2026-96225

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-96231

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-112266

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-112270

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-112279

Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.App.Runtime.linux-arm versions 9.0.0 through 9.0.20 Microsoft.AspNetCore.App.Runtime.linux-arm versions 10.0.0 through 10.0.12...

PT-2026-112282

Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.Authentication.Negotiate versions 10.0.0 through 10.0.12 Microsoft.AspNetCore.Authentication.Negotiate versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.Authentication.Negotiate versions 9.0.0 through 9.0.20 Description...