PT-2026-62505

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP to compromise th...

PT-2026-62498

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware component: OUD Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified...

PT-2026-62495

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory version 12.2.1.4.0 Oracle Unified Directory version 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP to compromise the...

The vulnerability of the Unified Consent System component in Windows operating systems, which allows a violator to increase their privileges

The vulnerability of the Unified Consent System component in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

OESA-2026-3056 patch security update

Patch takes a patch file containing a difference listing produced by the diff program and applies those differences to one or more original files, producing patched versions. Security Fixes: GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff pat...

Security update for patch (low)

openSUSE security update: security update for patch ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21332-1 Rating: low References: bsc1271166 bsc1271167 Cross-References: CVE-2026-56288 CVE-2026-56289 CVSS scores: CVE-2026-56288 SUSE : 3.3...

EUVD-2026-43868

Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally...

CVE-2026-50326

Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally...

CVE-2026-50326 Windows Unified Consent System Elevation of Privilege Vulnerability

...

CVE-2026-50326 Windows Unified Consent System Elevation of Privilege Vulnerability

...

CVE-2026-50326

CVE-2026-50326 affects the Windows Unified Consent System. Description: use-after-free leading to local privilege escalation for an authorized attacker. Connected sources confirm the vulnerability and indicate Microsoft patches are available (e.g., MSRC/KB articles). In any write-up, cite that th...

Windows Unified Consent System Elevation of Privilege Vulnerability

Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally...

HPESBNW05080 rev.1 - HPE Unified OSS Console (UOC) and HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass, Gain Unauthorized Access, Session Reuse, Input Validation; Remote: Authentication Bypass, Gain Unauthorized Access, Session Reuse, Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console UOC...

PT-2026-58317

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free issue in the Windows Unified Consent System allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

SUSE-SU-2026:22651-1 Security update for patch

This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence bsc1271167. - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service bsc1271166...

SUSE-SU-2026:2922-1 Security update for patch

This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via anotherhunk function bsc1194037. - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence bsc1271167. - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of...

SUSE CVE-2026-56289

GNU patch is vulnerable to a denial of service DoS due to improper validation of hunk single block of changes in diff line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop...

patch: GNU patch: Denial of Service via crafted unified-diff input

A flaw was found in GNU patch. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted patch file. The improper validation of hunk single block of changes in diff line offsets in unified-diff input can lead to an effectively infinite processin...

PYSEC-2026-2385 Uncontrolled Resource Consumption in asyncua and opcua

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited numb...

CVE-2026-54800

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized...