201834 matches found
PT-2026-65527
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...
PT-2026-65431
The Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.1. This is due to insufficient authorization on the wp ajax pos get option AJAX handler, which verifies only a nonce tha...
CVE-2026-51267
schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the URL path concatenation and encoding module. The application splices untrusted extension path and attacker-controlled query string into a path buffer, then invokes urlencode without validating the final string...
CVE-2026-51271
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the WAV header parsing function readWAVHeader. The function reads untrusted chunk size and bytes-to-skip value directly from malicious WAV files without reasonable range restriction. Abnormally large bts an...
EUVD-2026-49892
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the WAV header parsing function readWAVHeader. The function reads untrusted chunk size and bytes-to-skip value directly from malicious WAV files without reasonable range restriction. Abnormally large bts an...
CVE-2026-51273
In the ESP32-based schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow is reported in the ID3 tag parsing function showID3Tag() within the embedded audio streaming library. The issue arises when the program reads untrusted, long ID3 tag values from crafted audio files and uses unbound...
CVE-2026-51270
CVE-2026-51270 concerns schreibfaul1's ESP32-audioI2S 3.4.5, which has a heap-based buffer overflow in the htmlToUTF8() HTML entity decoding function. The function decodes attacker-controlled HTML entities and uses memmove/memcpy to rearrange string content without validating remaining buffer siz...
CVE-2026-28912
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A user may be able to elevate privileges...
CVE-2026-28926
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to elevate privileges...
CVE-2026-66014
JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level...
CVE-2026-66015
An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successful exploitation may grant temporary platform administrator access...
CVE-2026-42016
JFrog Artifactory Self Hosted versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope...
CVE-2026-28926
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to elevate privileges...
EUVD-2026-49546
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to elevate privileges...
CVE-2026-28926
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to elevate privileges...
CVE-2026-28926
CVE-2026-28926 is a race condition that was addressed with improved state handling in macOS, fixed in Sequoia 15.7.8 and Sonoma 14.8.8. The issue could allow an app to elevate privileges locally (LOCAL attack vector; HIGH impact in confidentiality, integrity, and availability per CVSS). The docum...
CVE-2026-43698
An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges...
CVE-2026-43749
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges...