CVE-2026-46459: Missing Authorization

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029...

PT-2026-60166

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029...

EUVD-2026-43952

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58619

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50367

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-58619

CVE-2026-58619 is a Windows Sensor Data Service vulnerability described as a use-after-free that enables an authorized attacker to locally elevate privileges. The vulnerability is reported with CVSS 3.1: LOCAL attack vector, HIGH impact (C, I, A), and low privileges required with no user interact...

EUVD-2026-44306

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-50367

CVE-2026-50367 describes an elevation of privilege in the Windows Sensor Data Service due to a logic flaw: incorrect access of an indexable resource (a range error). An authenticated local attacker could exploit this to escalate privileges on the affected system. The vulnerability’s CVSS 3.1 vect...

CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

Windows Sensor Data Service Elevation of Privilege Vulnerability

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

Windows Sensor Data Service Elevation of Privilege Vulnerability

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

PT-2026-58349

Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description An incorrect access of an indexable resource, known as a range error, occurs within the Windows Sensor Data Service. This flaw allows an authorized attacker to elevate the...

PT-2026-58664

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50367: Incorrect Access of Indexable Resource

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58619: Use After Free

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

Home Assistant has stored XSS in history-graphs

SummaryThe "remaining charge time"-sensor for mobile phones imported/included from Android Auto it appears is vulnerable to the same issue as CVE-2025-62172.This also indicates that any sensor showing their name in the history-graph, is likely to be vulnerable to this issue. DetailsAnother entity...

PYSEC-2026-2516 Home Assistant has stored XSS in history-graphs

Summary The "remaining charge time"-sensor for mobile phones imported/included from Android Auto it appears is vulnerable to the same issue as CVE-2025-62172. This also indicates that any sensor showing their name in the history-graph, is likely to be vulnerable to this issue. Details Another...