CVE-2026-61357

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability

...

CVE-2026-61357

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61357

CVE-2026-61357 is described as a use-after-free in Application Information Services that allows an authorized attacker to locally elevate privileges. The available data indicate a local attack vector with low privilege required and no user interaction, resulting in high impact to confidentiality,...

EUVD-2026-56619

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability

...

Application Information Services Elevation of Privilege Vulnerability

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...

PT-2026-70428

Name of the Vulnerable Software and Affected Versions Application Information Services affected versions not specified Description A use-after-free issue in Application Information Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw tha...

CVE-2026-56580

HCL MyCloud was affected by Using Components with Known Vulnerability IIS Server . It may allow attackers to exploit publicly disclosed weaknesses and compromise the system...

CVE-2026-56580 HCL MyCloud was affected by Using Components with Known Vulnerability

HCL MyCloud was affected by Using Components with Known Vulnerability IIS Server . It may allow attackers to exploit publicly disclosed weaknesses and compromise the system...

CVE-2026-56580

HCL MyCloud was affected by Using Components with Known Vulnerability IIS Server . It may allow attackers to exploit publicly disclosed weaknesses and compromise the system...

EUVD-2026-46343

HCL MyCloud was affected by Using Components with Known Vulnerability IIS Server . It may allow attackers to exploit publicly disclosed weaknesses and compromise the system...

A Record-Breaking Patch Tuesday for June 2026

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company's monthly Patch Tuesday cycle. Nearly three dozen of those bugs earned Microsoft's most dire "critical" rating, and...

PT-2026-45945

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.17 through 2.4.67 nginx affected versions not specified Description A flaw in the HTTP/2 implementation allows a remote attacker to cause a denial of service DoS by inducing excessive memory allocation. The...

CVE-2026-5261 Shandong Hoteam InforCenter PLM BaseHandler.ashx uploadFileToIIS unrestricted upload

A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8. The impacted element is the function uploadFileToIIS of the file /Base/BaseHandler.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit i...

CVE-2026-1694

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information...

EUVD-2026-8838

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information...

CVE-2026-1694

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information...

CVE-2026-1694

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information...

CVE-2026-1694 Server configuration details in HTTP headers

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information...