CVE-2026-110359

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges...

EUVD-2026-100760

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges...

CVE-2026-110359

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges...

CVE-2026-110359

Hyland Desktop Host for Windows versions before 25.1.1 is vulnerable to local privilege escalation . The root cause is a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions (CWE-276). A local user can exploit these insufficient permissions to esca...

CVE-2026-110359: Incorrect Default Permissions

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges...

Astra Linux – Vulnerability in targetcli-fb

The Open-iSCSI TargetCLI-fb version up to 2.1.52 has weak permissions for the /etc/target directory as well as for the backup directory and backup files...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: targetcli (UTSA-2026-093622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093622 advisory. Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files. Tenable has extracted the preceding...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2025-48505

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

EUVD-2025-210688

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

CVE-2025-48505

CVE-2025-48505 affects the Vitis™ Unified installation path on local Windows machines. Weak permissions could let a low-privileged user escalate to privileged execution, potentially enabling arbitrary code execution. The provided documents do not specify exact vulnerable files, exact permission s...

CVE-2025-48505

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

CVE-2025-48505

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

EUVD-2025-210686

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2025-61970

CVE-2025-61970 affects the Vitis™ Unified installation path on local Windows machines. The root issue is weak permissions in the installation directory, which could allow a low-privileged user to create arbitrary code and potentially cause binary hijacking. The provided documents do not specify e...

CVE-2025-48505: Incorrect Default Permissions

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

CVE-2025-61970: Incorrect Default Permissions

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

PT-2026-70361

Name of the Vulnerable Software and Affected Versions Vitis Unified affected versions not specified Description Weak permissions in the installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...