CVE-2026-58536

CVE-2026-58536 : A use-after-free in Windows Cloud Files Mini Filter Driver allows an authorized local attacker to achieve elevation of privileges. Affected component: Windows Cloud Files Mini Filter Driver. Impact: local privilege escalation with high impact; exploit details are not provided in ...

CVE-2026-58536 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-58536 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injection

Summary OpenCost contains an unauthenticated file write vulnerability in the /serviceKey endpoint that allows remote attackers to overwrite the GCP service account key file without authentication. This can lead to service disruption, credential theft, and potential privilege escalation within...

GHSA-WMJ8-9953-VFF5 OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injection

Summary OpenCost contains an unauthenticated file write vulnerability in the /serviceKey endpoint that allows remote attackers to overwrite the GCP service account key file without authentication. This can lead to service disruption, credential theft, and potential privilege escalation within...

CVE-2026-50374

CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...

CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-50401 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

...

CVE-2026-50401 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

...

CVE-2026-50401

CVE-2026-50401 describes an information disclosure in the Windows Cloud Files Mini Filter Driver due to an out-of-bounds read. The impact is local and depends on the attacker already having some level of privileges, with a high confidentiality impact reported in the CVE; the advisory notes an aut...

CVE-2026-57969 Azure CycleCloud Elevation of Privilege Vulnerability

...

CVE-2026-14646 Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect

Nexus Repository 3 did not apply its existing Server-Side Request Forgery SSRF protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymo...

CVE-2026-14646

Nexus Repository 3 contains an SSRF issue where existing SSRF protections are not applied to HTTP redirect targets from proxy upstreams. If a user with read access to a proxy repo backed by an attacker-controlled or compromised upstream server — including anonymous users when enabled — requests c...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack...

Malicious code in process-status-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd09cd68063b99549f252d3db30b88d9eb4c9e479c784ad0c09ce063764d768 [email protected] is an empty stub index.js exports , empty author/description, suspicious version 99.9.1 whose sole material effect on...

Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read

xAI's Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed. A researcher publishing as cereblab, testing version 0.2.93, captured one of those uploads, cloned the git bundle o...