CVE-2026-18046 Cookie Consent < 0.0.10 - Subscriber+ MaxMind License Key Update

The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on the REST route that stores its geolocation service license key, so the route falls back to an authentication-only gate, allowing any authenticated user such as a...

[SECURITY] Fedora 44 Update: gpsd-3.27.5-5.fc44

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...

EUVD-2022-27034

Malicious code in bioql PyPI...

EUVD-2023-32939

Malicious code in bioql PyPI...

Windows geolocation service Disclosure

The vulnerability of the geolocation service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2025-21301

Windows Geolocation Service Information Disclosure Vulnerability...

CVE-2025-21301

Windows Geolocation Service Information Disclosure Vulnerability...

CVE-2025-21301 Windows Geolocation Service Information Disclosure Vulnerability

...

CVE-2025-21301 Windows Geolocation Service Information Disclosure Vulnerability

...

CVE-2025-21301

CVE-2025-21301 is a Windows Geolocation Service Information Disclosure vulnerability with CVSS 3.1 base score 6.5 (Network attack, Low attack complexity, Privileges required: Low, User interaction: None). The vulnerability is disclosed as affecting Windows Geolocation Service and is addressed by ...

Microsoft Windows Geolocation Service Access Control Vulnerability

Microsoft Windows Geolocation Service is a service for determining the geographic location of a device and providing location information to applications on Windows systems from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Geolocation Service. An...

CVE-2025-21301: Improper Access Control

Windows Geolocation Service Information Disclosure Vulnerability...

PT-2025-4205

Name of the Vulnerable Software and Affected Versions Windows Geolocation Service affected versions not specified Description The issue allows attackers to obtain sensitive information and affect the system. It is related to the Windows Geolocation Service. No information is available about the...

Geolocation redirection not working

The Citrix Optimizer's default OS templates disable the "Geolocation Service" on Citrix VDAs, which causes the geolocation redirection to fail...

FortiOS Access Control Bypass

The vulnerabilities of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks are related to deficiencies in access control. Exploiting these vulnerabilities allows a malicious actor to circumvent security restrictions by synchronizing publicly...

Windows Geolocation Code Execution

The vulnerability of the Windows Geolocation service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially created file...

CVE-2023-35343

Windows Geolocation Service Remote Code Execution Vulnerability...

CVE-2023-35343

Windows Geolocation Service Remote Code Execution Vulnerability...

Remote code execution

Windows Geolocation Service Remote Code Execution Vulnerability...

CVE-2023-35343

CVE-2023-35343 is a Windows Geolocation Service remote code execution vulnerability. The initial entry confirms an OS component (Windows Geolocation Service) with a CVSS v3.1 base score of 7.8 (High); attack vector listed as Local with User Interaction required, and impacts to confidentiality, in...