62330 matches found
Intel® Xeon® processor with Alias Checking Trusted Module Advisory
Summary: A potential security vulnerability in the Alias Checking Trusted Module for some Intel® Xeon® processor may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20898 Description: Improper acce...
PT-2026-70307
Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Improper access control within Ring 2: Device Drivers allows an unprivileged, unauthenticated local adversary to escalate privileges and execute local...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Service Registry and Repository due to July 2026 CPU
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, used by WebSphere Service Registry and Repository. These issues were disclosed as part of the IBM Java SDK updates in July 2026. These issues are also addressed by WebSphere Application Server shipped with WebSphere...
CVE-2026-21084
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information...
CVE-2026-21064
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...
EUVD-2026-55109
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information...
CVE-2026-21084
CVE-2026-21084 affects Samsung SmartThings prior to version 1.8.47.24, with improper access control that allows local attackers to access sensitive information. The description and connected records confirm a local attack vector with low privileges required and no user interaction, resulting in c...
CVE-2026-21064
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...
CVE-2026-21064
Technical details (affected product/component/root cause/fix) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-21064
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...
PT-2026-69873
Name of the Vulnerable Software and Affected Versions multicluster-global-hub affected versions not specified Description A flaw occurs during a ManagedClusterMigration where the system incorrectly grants all managed hubs read access to a shared communication topic. This allows a compromised...
PT-2026-69299
Name of the Vulnerable Software and Affected Versions 3CORESec Trapdoor versions prior to 1.2.3 Description Improper access controls exist in the DefaultFunction function, which allows a remote attacker to manipulate the system. Recommendations Update 3CORESec Trapdoor to version 1.2.3 or later. ...
CVE-2026-19244
A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be...
CVE-2026-12261 Improper Access Control in nltk/nltk
A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...
CVE-2026-12261
The CVE concerns nltk.downloader in nltk/nltk ≤ 3.9.4. The downloader extracts package archives into shared namespaces (corpora/ and taggers/) instead of package-isolated roots and validates integrity only after extraction. This design flaw enables one package to overwrite another package’s trust...
EUVD-2026-54313
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...
EUVD-2026-54320
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...
PT-2026-68848
Name of the Vulnerable Software and Affected Versions Jiangmin Antivirus 21 Description A flaw in the Minifilter Port component within the kvcore.sys library allows for improper access controls. This issue occurs in the MessageNotifyCallback function and requires local access to be exploited...