CVE-2026-20928

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Golang Go (CVE-2025-47914)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Golang Go, due to an issue with SSH Agent servers that do not validate the size of messages when processing new identity requests CVE-2025-47914. Golang Go is used in our speech-utilities. This vulnerabilitiy h...

CVE-2026-32192 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2026-32192 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2026-32192

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-32192

Azure Monitor Agent is affected by a Deserialization of untrusted data vulnerability (CVE-2026-32192) that allows an authorized attacker to elevate privileges locally. Public sources describe the issue as an elevation of privilege in Azure Monitor Agent, linked to improper input validation during...

CVE-2026-32168 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2026-32168 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2026-32168

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-32168

CVE-2026-32168 concerns the Azure Monitor Agent. The connected sources confirm an elevated-privilege vulnerability caused by improper input validation, enabling an authorized attacker to obtain higher privileges locally. Affected components explicitly named include Azure Monitor Agent (and relate...

Azure Monitor Agent Elevation of Privilege Vulnerability

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

Azure Monitor Agent Elevation of Privilege Vulnerability

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

ai-pentest-agent

🔐 AI Pentest Agent v4 Automated web application penetration...

USN-8173-1: polkit vulnerabilities

It was discovered that polkit incorrectly handled nested elements in XML policy files. If an administrator were tricked into installing a malicious policy file, a remote attacker could possibly use this issue to cause polkit to crash, resulting in a denial of service. CVE-2025-7519 Pavel Kohout...

vulnswarm

VulnSwarm AI-powered vulnerability discovery using multi-agen...

PT-2026-32836

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description Improper input validation allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a...

Microsoft Azure Monitor Agent 输入验证错误漏洞

Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...

Microsoft Azure Monitor Agent < 1.41.0 Elevation of Privilege (CVE-2026-32192)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.41.0. It is, therefore, affected by an elevation of privilege vulnerability: - An elevation of privilege vulnerability exists in Azure Monitor Agent that allows an authorized attacker to elevate privileges...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3248 (ALAS-2026-3248)

"The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3248 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...

PT-2026-32846

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...