35048 matches found
PT-2026-88431
The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw values are substituted directly into the filter string and passed to the LDAP search operation, resulting in modification of th...
PT-2026-88630
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
PT-2026-87184
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member list of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...
CVE-2026-80159: Untrusted Search Path
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
CVE-2026-81192: Untrusted Search Path
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...
CVE-2026-69305: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-77827: Unquoted Search Path or Element
Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80...
CVE-2026-76199: Uncontrolled Search Path Element
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...
Adobe Photoshop 26.x < 26.11.7 / 27.x < 27.7 Multiple Vulnerabilities (APSB26-130)
The version of Adobe Photoshop installed on the remote Windows host is prior to 26.11.7/27.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-130 advisory. - Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in...
PT-2026-87527
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
CVE-2026-68896: Absolute Path Traversal
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-70145: Out-of-bounds Read
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-69608: Integer Overflow or Wraparound
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69585: Incorrect Type Conversion or Cast
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-72980: Uncontrolled Search Path Element
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...
PT-2026-87480
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
PT-2026-87791
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
PT-2026-87351
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...