10 matches found
CVE-2026-25265
CVE-2026-25265 affects Qualcomm Software Center , where a privilege escalation is possible due to the creation of a temporary file with insecure permissions . The root cause is a weak configuration during temporary file handling, allowing a local attacker with low privileges to gain full control ...
CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
Privilege escalation due to weak configuration while temporary file handling...
CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
Privilege escalation due to weak configuration while temporary file handling...
CVE-2026-25264
Qualcomm Software Center is affected by an uncontrolled search path element vulnerability arising from weak configuration during its package extraction process. A local user with low privileges can exploit this to escalate privileges, with changed scope and high impact on confidentiality, integri...
CVE-2026-25264 Uncontrolled Search Path Element in Qualcomm Software Center
Privilege escalation due to weak configuration during package extraction process...
CVE-2026-25264 Uncontrolled Search Path Element in Qualcomm Software Center
Privilege escalation due to weak configuration during package extraction process...
CVE-2026-25255 Exposed function in Qualcomm Package Manager and Qualcomm Software Center.
Exposed dangerous function lead to privilege escalation via gRPC server...
CVE-2026-25254 Improper authorization in Qualcomm Software Center
Improper authorization leads to Remote Code Execution via SocketIO interface...
CVE-2026-25254
CVE-2026-25254 is a critical (CVSS 9.8) improper authorization vulnerability in Qualcomm Software Center (QSC family) , where deficiencies in the authentication process via the SocketIO interface allow a remote, unauthenticated attacker to achieve Remote Code Execution with high impact on confide...