CVE-2026-9268 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without...

EUVD-2026-98227

GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without...

CVE-2026-9268

GitLab EE is affected by a vulnerability where an authenticated user with limited permissions could modify project CI/CD deployment rollback settings without proper authorization. This issue stems from insufficient access control checks . The vulnerability affects versions 13.6 before 19.2.8 , 19...

CVE-2026-69945: Missing Authorization

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

PT-2026-112101

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description An out-of-bounds read in the Windows AppX Deployment Service allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the...

PT-2026-112810

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations A...

PT-2026-112098

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description Missing authorization in the Windows AppX Deployment Service allows an authorized attacker to perform local tampering. Recommendations At the moment, there is no...

Microsoft Windows: CVE-2026-69979: Windows AppX Deployment Service Security Feature Bypass Vulnerability

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-97793: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

PT-2026-112982

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description An improper synchronization issue, known as a race condition, occurs during concurrent execution using a shared resource. This allows an unauthorized attacker to execute...

CVE-2026-69914: Out-of-bounds Read

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

CVE-2026-69905: Missing Authorization

Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally...

CVE-2026-88174: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88174: Windows Deployment Services Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-85934: Use After Free

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85849: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69969: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

CVE-2026-69979: Improper Protection of Alternate Path

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-69905: Windows AppX Deployment Service Tampering Vulnerability

Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-69945: Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...