18615 matches found
@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.205), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.205) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.1.0, <=2.1.14)
@fedify/vocab-runtime NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.0-dev.403, =2.1.0-dev.403, =2.1.0-dev.403, =2.1.0-dev.403, =2.1.14 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...
@fedify/cli (>=2.2.0-dev.898, <=2.2.3), @fedify/fedify (>=2.2.0-dev.606, <=2.2.3) +3 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.2.0, <=2.2.3-dev.1098)
@fedify/vocab-runtime NPM version =2.2.0, =2.2.0-dev.898, =2.2.0-dev.606, =2.2.0-dev.606, =2.2.0-dev.606, =2.2.0-dev.606, =2.2.3 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...
MAL-2026-10606 Malicious code in base58-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5517883cb10a7c76e95fdf21a4ffce21c13fe1ca42fafc13f5adb021599772 The package's index.js contains multiple Buffer.from... decode sites lines 7, 29, 34, 49, 50 used to reconstruct strings/payloads at runtime — the...
CVE-2026-50350
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally...
CVE-2026-50323
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-58527
CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-54125 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-54125 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-54125
CVE-2026-54125 affects Windows Runtime and describes a race-condition vulnerability in concurrent execution on a shared resource that enables local privilege elevation for an authenticated attacker. The CVE is rated with CVSSv3.1 base metrics: AV Local, AC Low, PR Low, UI None, S unchanged, C/H/I...
CVE-2026-50503 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50503 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50503
CVE-2026-50503 is a Windows Runtime elevation-of-privilege vulnerability caused by a race condition from improper synchronization on a shared resource. The issue allows an authorized, low-privilege attacker to potentially gain higher privileges locally. Exploitation status is not detailed in the ...
CVE-2026-50486 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50486 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50486
CVE-2026-50486 is a Windows Runtime use-after-free vulnerability that enables a local, authenticated attacker with low privileges and no user interaction to elevate privileges. The issue is described as a Windows Runtime elevation of privileges vulnerability. Public details in connected sources i...
CVE-2026-50457
CVE-2026-50457 (Windows Runtime) is a local elevation of privileges vulnerability caused by a use-after-free in Windows Runtime. An authorized attacker could exploit this to gain higher privileges on the system. The entry is corroborated by multiple sources (NVD/NCSC/Circl) and Microsoft has rele...