CVE-2026-112109

A local privilege escalation vulnerability in Thales SafeNet Authentication Client SAC SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local Syste...

EUVD-2026-117636

A stack-based buffer overflow in Thales SafeNet Authentication Client SAC SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and may cause a denial of service or potentially arbitrary code...

EUVD-2026-117613

A local privilege escalation vulnerability in Thales SafeNet Authentication Client SAC SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local Syste...

CVE-2023-5993

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-7016

A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access...

CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-7016: Improper Privilege Management

A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access...

CVE-2023-5993: Improper Privilege Management

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2021-42056: Improper Link Resolution Before File Access

Thales Safenet Authentication Client SAC for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges...

PT-2022-11537

Name of the Vulnerable Software and Affected Versions Thales Safenet Authentication Client SAC for Linux and Windows versions through 10.7.7 Description The issue allows a local attacker to create insecure temporary hid and lock files, potentially leading to arbitrary file overwriting and command...