MAL-2026-1158 Malicious code in xpack-arc-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c9b6f2c89a51bfa23febfa505e5ce2696cd6ae695ee0a7b057e194f10ca2b The package xpack-arc-gateway was found to contain malicious code. Source: ghsa-malware...

CVE-2026-2036

CVE-2026-2036 affects GFI Archiver: MArc.Store.Remoting.exe configuration allows deserialization of untrusted data, enabling remote code execution with SYSTEM privileges. Authentication is required but can be bypassed according to ZDI advisory; multiple feeds corroborate. No patch/version fix det...

February 10, 2026—KB5075971 (Monthly Rollup)

None None...

February 10, 2026—Hotpatch KB5075942 (OS Build 26100.32313)

None None...

February 10, 2026—KB5075970 (Monthly Rollup)

None None...

CVE-2026-24302

Azure Arc Elevation of Privilege Vulnerability...

EUVD-2026-5522

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-24302

Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-24302

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-24302

CVE-2026-24302 is an Elevation of Privilege issue in Microsoft Azure Arc caused by improper access control. An authenticated attacker could exploit a network path to elevate privileges; CVSS 3.1 vectors show network access, no user interaction, high to critical impact. Microsoft/Microsoft-affilia...

CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability

...

Azure Arc Elevation of Privilege Vulnerability

Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

Microsoft Azure Arc 访问控制错误漏洞

Microsoft Azure Arc is a storage system from Microsoft USA. that extends the Azure platform into your environment. Microsoft Azure Arc has an Access Control Error vulnerability that can be exploited by an attacker to elevate privileges...

PT-2026-6638

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An elevation of privilege issue exists in Azure Arc. Successful exploitation could allow an attacker to gain elevated privileges. Recommendations At the moment, there is no information abou...

January 13, 2026—KB5073696 (Monthly Rollup)

None None...

January 13, 2026—KB5073698 (Monthly Rollup)

None None...

CVE-2023-25952

Out-of-bounds write in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-29165

Unquoted search path or element in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

RUSTSEC-2026-0001 Potential Undefined Behaviors in `Arc<T>`/`Rc<T>` impls of `from_value` on OOM

The SharedPointer::alloc implementation for sync::Arc and rc::Rc in rkyv/src/impls/alloc/rc/atomic.rs and rc.rs does not check if the allocator returns a null pointer on OOM Out of Memory. This null pointer can flow through to SharedPointer::fromvalue, which calls Box::fromrawptr with the null...