CVE-2026-20472: Out-of-bounds Write

In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764...

CVE-2026-20468: Out-of-bounds Write

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741...

CVE-2026-20464: Out-of-bounds Write

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

CVE-2026-20473: Use After Free

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759...

PT-2026-67163

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A missing bounds check in the display component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This could lead to local...

PT-2026-67162

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A race condition in display allows for a local escalation of privilege. This occurs when a malicious actor who has already obtained System privilege exploits the timing of events to gain...

PT-2026-67155

Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description A missing bounds check in the software allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it does not...

CVE-2026-20496: Out-of-bounds Read

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132...

CVE-2026-20490: Out-of-bounds Read

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10981501; Issue ID: MSV-7669...

PT-2026-67169

Name of the Vulnerable Software and Affected Versions geniezone affected versions not specified Description A missing bounds check in geniezone allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local escalati...

PT-2026-67184

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID:...

PT-2026-67165

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A missing bounds check in the display component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This could lead to local...

CVE-2026-20493: Out-of-bounds Write

In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: BORA00154903; Issue ID: MSV-7575...

CVE-2026-44595

Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java, so any authenticated user, even one...

CVE-2026-44595

CVE-2026-44595 affects Yamcs’ core IAM API endpoints: GET /api/iam/users, GET /api/iam/users/{name}, GET /api/iam/groups, and GET /api/iam/groups/{name}. The root cause is missing enforcement of SystemPrivilege.ControlAccess in Yamcs’ IAM API (IamApi.java), enabling any authenticated user—even wi...

CVE-2026-21052

Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege...

CVE-2026-21052: Undefined Security Weakness

Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege...

CVE-2026-56437

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege...

Multiple vulnerabilities in the installer for Pupsman

Overview The installer for Pupsman provided by Fuji Electric Co.,Ltd. contains multiple vulnerabilities listed below: Uncontrolled search path element CWE-427 - CVE-2026-56437 The CVSS vectors above assume that a victim user is directed to place a specially crafted DLL file in the same folder as...

CVE-2026-57895

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege...