84416 matches found
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...
Important: Red Hat Security Advisory: xmlrpc-c security update
An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component
A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...
PT-2026-87776
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A use after free issue exists in Windows Error Reporting. This allows an authorized attacker to elevate privileges locally on the system. Use after free is a memory corruption...
CVE-2026-85485: Improper Neutralization of Input During Web Page Generation
HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent...
CVE-2026-69436: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69513: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69612: Absolute Path Traversal
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-88337
HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no...
PT-2026-87402
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87614
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-75156: Origin Validation Error
Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...
PT-2026-88233
In LimitRealloc of malloc limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-69559: Origin Validation Error
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...
PT-2026-88220
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the btm sec encrypt change function within btm sec.cc allows for a downgrade attack. This issue enables remote information disclosure without...
PT-2026-88224
Name of the Vulnerable Software and Affected Versions Android OS affected versions not specified Description A logic error in multiple functions of RemoteViews.java allows a bypass of background activity launch restrictions. This flaw enables local escalation of privilege without requiring...
CVE-2026-69578: Numeric Truncation Error
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-0065: Protection Mechanism Failure
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...
CVE-2026-28602: Improper Access Control
In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...