3701 matches found
keycloak: Keycloak: Privilege escalation via Time-of-Check to Time-of-Use (TOCTOU) vulnerability
A flaw was found in Keycloak. An authenticated administrator with the manage-clients role can exploit a Time-of-check to time-of-use TOCTOU vulnerability in the name-based admin role checks. This allows the attacker to escalate their privileges to realm-admin for all users within the realm,...
EUVD-2026-60096
opensslencrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revokekey method that allows authenticated clients to revoke any other client's key. Attackers can revoke arbitrary keys by providing a valid ML-DSA signature, bypassing the intended ownership...
Important: Red Hat Security Advisory: Streams for Apache Kafka 3.2.1 release and security update
Streams for Apache Kafka 3.2.1 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Vulnerabilities exploited in Zoom
Zoom has identified vulnerabilities in the Zoom Clients and Zoom VDI Client software. The Zoom Clients contain several vulnerabilities related to the annotation function. One vulnerability involves an incomplete bounds check, which can lead to a buffer overwrite. This allows an external participa...
CVE-2026-48804
CVE-2026-48804 affects the Python Socket.IO server implementation in python-socketio. The issue: the server stores binary EVENT and ACK messages in memory while waiting for missing attachments, allowing an attacker to submit a binary message and omit attachments, causing the message and partial a...
CVE-2026-53415
Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access...
CVE-2026-53413
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...
CVE-2026-53415 Zoom Clients - Use After Free
Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access...
CVE-2026-53415
The CVE-2026-53415 entry identifies a Use-After-Free vulnerability in Zoom Clients’ annotator function, allowing a meeting participant to remotely execute code on another participant over the network. The issue is confirmed across multiple sources (NVD and CVE listings). Affected component: Zoom ...
CVE-2026-53414 Zoom Clients - Buffer Over-read
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access...
EUVD-2026-56244
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access...
CVE-2026-53414
The CVE-2026-53414 entry concerns Zoom Clients with a missing bounds check in the annotator function, leading to a buffer over-read. The vulnerability is exploitable by a meeting participant over the network and can cause a denial of service to another participant. Documents confirm the vulnerabl...
EUVD-2026-56239
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...
CVE-2026-53413
CVE-2026-53413 involves missing bounds checks in the annotator function of Zoom Clients, leading to a buffer overwrite vulnerability. The underlying issue is a lack of input validation in the annotator component, which can potentially allow a meeting participant to perform remote code execution o...
CVE-2026-53413 Zoom Clients - Buffer Over-write
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...
CVE-2026-53413 Zoom Clients - Buffer Over-write
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...
PT-2026-70261
Name of the Vulnerable Software and Affected Versions Zoom Clients affected versions not specified Description A Use after Free issue exists in the annotator function. This flaw allows a meeting participant to achieve remote code execution on another participant's system via network access. Use...
[SECURITY] Fedora 43 Update: freeipa-4.13.2-1.fc43
IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...
CVE-2026-48082 OpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplification
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, the bootstrap challenge endpoint at /api/tenants/id/appointments/bootstrap-challenge issues a SHA-256 proof-of-work with difficulty=4 hex zeros, equivalent to 16 bit...