CVE-2026-34943 Wasmtime panics when lifting `flags` component value

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime contains a possible panic which can happen when a flags-typed component model value is lifted with the Val type. If bits are set outside of the set of flags the component model specifies that these bits...

CVE-2026-34943

Wasmtime (WebAssembly runtime) has a vulnerability where lifting a flags-typed component-model value with Val can panic if bits outside the allowed flags set are present. Affected versions before fixes include 24.0.7, 36.0.7, 42.0.2, and 43.0.1; the panic occurs in Wasmtime’s Val lifting (not in ...

PT-2026-31684

Name of the Vulnerable Software and Affected Versions Wasmtime versions prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1 Description Wasmtime, a runtime for WebAssembly, may experience a panic when a flags-typed component model value is lifted with the Val type. This occurs if bits are set outside the...

Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and the EMUI account module are...

lifting-mammaire.net Improper Access Control vulnerability OBB-3858597

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Lenovo Vantage Security Breach

Lenovo Vantage is a computer management application from the Chinese company Lenovo Lenovo. The program supports driver updates, device status diagnostics and computer configuration. A security vulnerability exists in Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and prior versions, which...

NVIDIA DGX-1 buffer error vulnerability

NVIDIA DGX-1 is a personal computing device for deep learning applications from NVIDIA Corporation. A security vulnerability exists in NVIDIA DGX-1 Servers, which stems from an issue in Bds that could lead to code execution, denial of service, and power lifting...

Microsoft DFSCoerce Domain Control Privilege Vulnerability

Windows Server is a server operating system for Windows introduced by Microsoft on April 24, 2003, with the Microsoft Windows Server System WSS at its core. Microsoft DFSCoerce has a domain control privilege exploit, which can be exploited by an attacker to request the certificate of a domain...

Red Hat Keycloak security vulnerabilities

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak, which stems from a power lifting vulnerability on Token Exchange...

Kingdee KIS Professional Edition: Permissions, Licenses, and Access Control Vulnerabilities

Kingdee Kis Professional Edition Kingdee Kis Professional Edition is an Erp software from China Kingdee Kingdee Company. Kingdee KIS Professional Edition suffers from a Privilege Permission and Access Control Issues vulnerability, which stems from Kingdee KIS Professional Edition suffers from a...

Tencent Video (Windows client) suffers from a local power lifting vulnerability (CNVD-2021-37954)

Tencent Video, an online video platform with popular content and professional media operation capabilities, is a comprehensive video content platform that aggregates hit movies and TV shows, variety shows and entertainment, sports events, news and information. Tencent Video Windows client suffers...

2345 Security Guard suffers from a local power lifting vulnerability

2345 Security Guard is the security software of Shanghai 2-3-4-5 Network Technology Co. 2345 Security Guard has a local access vulnerability, which can be exploited by an attacker to gain control of the server...

Kingdee KIS Professional Edition has a power lifting vulnerability

Kingdee KIS is an ERP software, ERP system integrates supply chain management, financial management, human resource management, customer relationship management, office automation, business analysis, mobile commerce, integrated interfaces and industry plug-ins and other business management...

ZDCC VisualField suffers from localized power lifting vulnerability

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. ZDCC VisualField is vulnerable to a local power lifting vulnerability that can be exploited by an attacker to gain control of the server...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65125)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65127)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65126)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

Dell Encryption and Dell Endpoint Security Suite Privilege Mobilization Vulnerability

Dell Encryption and Dell Endpoint Security Suite are both products of Dell Inc.Dell Encryption is a data protection solution. Dell Encryption is a data protection solution that includes compliance management, authentication, disk data encryption, and port encryption.Dell Endpoint Security Suite i...

Microsoft Windows Lockscreen Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A power lifting vulnerability exists in Microsoft Windows Lockscreen, which arises from a program's inability to properly load a focused image from a secure location. An attacker can...

Google Android power lifting vulnerability (CNVD-2019-37970)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to elevate privileges...