CVE-2026-85830: Out-of-bounds Read

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85374: Windows Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

CVE-2026-88080: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83676: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-109358

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

CVE-2026-109358 Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

EUVD-2026-97660

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

CVE-2026-109358: Incorrect Permission Assignment for Critical Resource

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

lowkey

Agentes de Codificación de IA Auto-Alojados en AWS — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ Mira el tutorial completo en YouTube 📝 Lee el artículo del blog: "Le di a mi agente su propia cuenta de AWS" TL;DR — despliega Lowkey: curl -sfL install.lowkey.run | bash Funciona en bash ,...

installer

Descripción general Instalación mql cnspec Escanea tu plataforma objetivo Información del paquete Kubernetes Estado Contenedores Docker: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Instalación La forma más sencilla de instalar mql y cnspec es utilizar los scripts de instalación...

CVE-2026-108160

The AstronRPA desktop client (versions through 1.1.6 ) is vulnerable to a download of code without integrity check (CWE-494). The electron-updater component fails to perform signature verification when fetching updates via a plain-HTTP feed . A network attacker positioned between the client and t...

CVE-2026-106581 Docker Desktop for Windows installer failed to verify external packages

Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An attacker able to provide a crafted package and convince a user to approve the Docker-signed UAC prompt could execute attacker-controlled installer...

CVE-2026-106581

Before version 4.92.0 , Docker Desktop for Windows failed to verify the cryptographic signature of packages provided via the Docker Desktop Installer.exe install -package command. This vulnerability allows an attacker who can provide a crafted package and convince a user to approve a Docker-signe...

CVE-2026-84271

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-107707

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-107707 Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

EUVD-2026-95240

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-84271 IBM Guardium Data Protection Signature Verification Bypass

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-84271

IBM Guardium Data Protection 12.2 contains a signature verification bypass vulnerability within the patch installer. An attacker with local access could exploit this flaw to achieve arbitrary code execution with root privileges . The root cause is identified as a race condition (CWE-362). No spec...

CVE-2026-107573 Incorrect Default Permissions in hMailServer

Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the...