CVE-2026-83991-writeup-and-poc

The File Said No. Cloud Files Said Supersede. CVE-2026-83991 is a Windows Cloud Files tampering vulnerability whose published affected range begins with Windows 10 version 1809, almost eight years before the September 2026 fix. I asked Windows to open a file for writing. It answered...

Exploit for CVE-2026-83991

The File Said No. Cloud Files Said Supersede. CVE-2026-8...

CVE-2026-28664

In WriteImageToDisk of runtimeimage.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73993

In WriteImageToDisk of runtimeimage.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28664

The Android Runtime (ART) component is affected by a logic error in the WriteImageToDisk function of runtime_image.cc. This flaw allows for file tampering , which can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. This vulnerability ...

CVE-2026-28664

In WriteImageToDisk of runtimeimage.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28664

In WriteImageToDisk of runtimeimage.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88231

In WriteImageToDisk of runtime image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28664: Protection Mechanism Failure

In WriteImageToDisk of runtimeimage.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-489675413

In WriteImageToDisk of runtimeimage.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-72971

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

Linux Distros Unpatched Vulnerability : CVE-2026-17583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these...

CVE-2026-17583

The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes...

Thermo Fisher Applied Biosystems Genetic Analyzers

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to modify .fsa/.hid output files, tampering with DNA data and resulting in inaccurate test results. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...

CVE-2026-44100

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

CVE-2026-44100 JupiCore charging point reconfiguration without auth

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

PT-2026-66428

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

MiracleLinux 9 : dotnet9.0-9.0.118-1.el9_8.ML.1 (AXSA:2026-1381:14)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1381:14 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...

MiracleLinux 9 : dotnet10.0-10.0.109-1.el9_8.ML.1 (AXSA:2026-1369:15)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1369:15 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...

MiracleLinux 9 : dotnet8.0-8.0.128-1.el9_8.ML.1 (AXSA:2026-1363:13)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1363:13 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...