490 matches found
Honeywell IQ MultiAccess Update Service 27 / 28 Privilege Escalation
Honeywell IQ MultiAccess Update Service suffers from a local privilege escalation vulnerability. Due to a named pipe configured with a NULL DACL a low-privileged user can use the pipe to communicate with the IQUpdSrv service running as SYSTEM. When providing specific data over the pipe, arbitrary...
Windows Server Update Service - Insecure Deserialization
Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise. id: CVE-2025-59287 info:...
Red Hat Security Advisory 2026-55860-03
Red Hat Security Advisory 2026-55860-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Issues addressed include a denial of service vulnerability...
The vulnerability of the Windows Server Update Service (WSUS) for Windows operating systems allows a hacker to make changes to the system via the network.
The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...
About Remote Code Execution - ViPNet Client (BDU:2026-09885) vulnerability
About Remote Code Execution - ViPNet Client BDU:2026-09885 vulnerability. The ViPNet Client software suite is designed to protect corporate users' workstations by providing secure data exchange over IP networks, controlling the network activity of applications and operating system components, and...
Important: Red Hat Security Advisory: xorg-x11-server security update
An update for xorg-x11-server is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
The vulnerability of the UPDATE service for the ONLYOFFICE Desktop Editors allows a hacker to execute arbitrary code.
The vulnerability of the ONLYOFFICE Desktop Editors office package lies in the lack of validation during the processing of incoming requests. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2026-18606
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...
CVE-2026-18606
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...
CVE-2026-18606
RCE-like local privilege escalation in Razer RzUpdateService 1.10.14.0 via Named Pipe Handler (RzUpdateService.exe). Manipulating lpThreadParameter is reported to cause improper privilege management; requires local access. Publicly available exploit noted; vendor contacted early. No remediation d...
EUVD-2026-47143
Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite component: Update Service Request. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer...
CVE-2026-60844
Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite component: Update Service Request. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer...
PT-2026-62820
Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite component: Update Service Request. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer...
CVE-2026-60844: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite component: Update Service Request. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer...
EUVD-2026-44074
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...
EUVD-2026-43856
Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
CVE-2026-50444
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-50328
Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
