1933639 matches found
CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
EUVD-2026-73016
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
CVE-2026-69534 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
CVE-2026-69534
CVE-2026-69534 is a command injection vulnerability in the Windows Program Compatibility Assistant Service , caused by improper neutralization of special elements used in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation , with a CVSS 3.1 score of 7.8 ...
EUVD-2026-73011
Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69534 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
CVE-2026-68845
CVE-2026-68845 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to perform local privilege escalation . Microsoft rates it HIGH severity (CVSS 3.1: 7.8) with a local attack vector, low complexity, low privileges required, an...
EUVD-2026-73199
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
[SECURITY] [DLA 4777-1] linux security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4777-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso September 08, 2026 https://wiki.debian.org/LTS -...
GHSA-97QJ-X29F-37W7 NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
Several XML parsing sites in NLTK still used xml.etree.ElementTree directly, which honours declarations in a document's internal DTD subset. A crafted document a few hundred bytes long can expand to megabytes in memory each nesting level multiplies by ten, a denial-of-service. Affected call sites...
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
Several XML parsing sites in NLTK still used xml.etree.ElementTree directly, which honours declarations in a document's internal DTD subset. A crafted document a few hundred bytes long can expand to megabytes in memory each nesting level multiplies by ten, a denial-of-service. Affected call sites...
GHSA-6WW7-3FRV-CQXH NLTK: pathsec SSRF protection can be bypassed when a proxy is configured
Summary Current NLTK source reopens SSRF in proxied environments. pathsec.urlopen validates the requested hostname locally, but once proxy inheritance is enabled the real fetch is performed by the proxy rather than by the validated direct-connect socket path. Details - Vulnerability type:...
NLTK: pathsec SSRF protection can be bypassed when a proxy is configured
Summary Current NLTK source reopens SSRF in proxied environments. pathsec.urlopen validates the requested hostname locally, but once proxy inheritance is enabled the real fetch is performed by the proxy rather than by the validated direct-connect socket path. Details - Vulnerability type:...
Security Bulletin: Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
Summary Langflow uses a code security scanner and component-level execution policies to restrict server-side code execution to authorized users and contexts. The agentic assistant code scanner employs an incomplete denylist omitting process-spawning primitives and contains a logic error where...
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution
Summary The NLTK library's TransitionParser.parse method deserializes model files using pickleload with the default restricted=False parameter, allowing arbitrary Python code execution when loading a malicious model file. The library provides a RestrictedUnpickler class for safe deserialization,...
GHSA-RHP5-R9X4-F5G2 NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution
Summary The NLTK library's TransitionParser.parse method deserializes model files using pickleload with the default restricted=False parameter, allowing arbitrary Python code execution when loading a malicious model file. The library provides a RestrictedUnpickler class for safe deserialization,...
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely
Summary IPIPANCorpusReader nltk/corpus/reader/ipipan.py exposes public methods, channels, domains, categories, and fileidschannels=..., that accept a caller supplied fileids list and read a file via a completely unprotected builtin open call, with no nltk.pathsec involvement at all. A symlink...