79 matches found
CVE-2026-46072
A flaw was found in the Linux kernel's ntfs3 module. A local attacker, by mounting a specially crafted NTFS New Technology File System image containing truncated run data, could trigger an out-of-bounds heap read. This vulnerability allows for the disclosure of sensitive information from kernel...
CVE-2026-44215 NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser
NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a one-byte heap out-of-bounds null write exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerability is triggered when opening a crafted UFS filesystem image. The attacker controls the byte offset of th...
NanaZip ĺŽĺ ¨ćźć´
NanaZip is a compression software open source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1698.0 contained security vulnerabilities. These vulnerabilities stemmed from the GetAllPaths function in the UFS/UFS2 file system image parser, which allowed recursive subdirectories without...
CVE-2026-25166
Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...
The vulnerability of the System Image Manager tool in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the System Image Manager SIM tool in Windows operating systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...
EUVD-2026-10629
Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...
CVE-2026-25166
Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...
CVE-2026-25166 Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability
...
CVE-2026-25166
CVE-2026-25166 /Windows System Image Manager ADK: A.local, low-privilege, no-user-interaction remote code execution vulnerability with high impact (C/H/I/A) per CVSS 3.1; fix is an official update. Exploitation details are not provided in the document.
CVE-2026-25166 Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability
...
CVE-2026-25166
Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...
March 10, 2026âKB5079466 (OS Build 28000.1719)
None None...
Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability
Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...
PT-2026-24293
Name of the Vulnerable Software and Affected Versions Windows System Image Manager affected versions not specified Description A flaw exists in the deserialization process within Windows System Image Manager. This issue could allow an authorized attacker to execute code locally. The vulnerability...
CVE-2026-25166: Deserialization of Untrusted Data
Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...
EUVD-2018-7265
Malware in sbrugna...
EUVD-2019-2335
Malware in sbrugna...
EUVD-2022-42517
Malicious code in bioql PyPI...