Security Bulletin: SPSS Collaboration and Deployment Services is affected by an Apache Ant vulnerability that could allow arbitrary file overwrite via malicious FTP/SCP downloads

Summary SPSS Collaboration and Deployment Services is affected by an Apache Ant vulnerability that could allow arbitrary file overwrite via malicious FTP/SCP downloads. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-78254 DESCRIPTION: The ftp and scp task...

CVE-2026-102175: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via ...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2026-97793

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

CVE-2026-88174

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-85934

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85849

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69979

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-69969

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

CVE-2026-69945

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

CVE-2026-69905

Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally...

CVE-2026-69914

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

CVE-2026-97793

A vulnerability in Windows Setup and Deployment arises from missing authentication for a critical function . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-306 . While a CVSS v3.1 score of 7.0 is provided, specific detail...

EUVD-2026-100312

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

EUVD-2026-100104

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-88174

A race condition exists in Windows Deployment Services due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an unauthorized attacker to achieve remote code execution over the network. No specific exploit details or official patch versions ...

CVE-2026-85934

A Use after free vulnerability in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally . The vulnerability is identified with a CVSSv3.1 score of 7.0, indicating a high severity. No specific remediation details or exploit links are provided in the docume...

CVE-2026-85849

The Windows AppX Deployment Service is vulnerable to an elevation of privilege flaw caused by improper link resolution before file access (link following). This vulnerability allows an authorized attacker to perform local privilege escalation. The CVSS v3.1 score is 7.8 , reflecting high impact o...

CVE-2026-69979

The Windows AppX Deployment Service is affected by a security feature bypass vulnerability (CVE-2026-69979 ) caused by improper protection of an alternate path . An authorized attacker can exploit this flaw locally to evade security measures. The vulnerability is assigned a CVSS 3.1 score of 5.5 ...

CVE-2026-69969

The Windows AppX Deployment Service is vulnerable to an information disclosure vulnerability (CVE-2026-69969) due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to disclose information locally. Exploitation details and specific remedi...