17463 matches found
CVE-2026-0183
In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-12889
CVE-2019-12889 Resumen Existe una escalada de privilegios no autenticada en SailPoint Desktop Password Reset 7.2. Un usuario con acceso local únicamente a la pantalla de inicio de sesión de Windows puede escalar sus privilegios a NT AUTHORITY\System. Un atacante necesitaría acceso local a la...
CVE-2026-73465 On affected platforms running Arista EOS, under certain circumstances plaintext private keys
On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already...
CVE-2026-58721
CVE-2026-58721 is a local information disclosure vulnerability in the GSA subcomponent of Google Pixel devices, caused by uninitialized memory use in multiple locations. Exploitation requires System execution privileges and no user interaction. Google classifies this as Critical severity in the P...
EUVD-2026-79008
In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56958
CVE-2026-56958 is an out-of-bounds read vulnerability in the gf_algo_get_cached_dump_data function of gf_algo.c, caused by a missing bounds check . This defect resides in Qualcomm's Graphics Firmware (GPU) subsystem used in Android devices. The flaw allows local information disclosure with low pr...
EUVD-2026-78971
In validatensbuf of mbuclass.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56945
In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
dirtypipe
Referencia: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 Diagnóstico Se ha desarrollado un script de detección de vulnerabilidades para determinar si su sistema se ve afectado actualmente por esta falla. Para verificar la autenticidad del script, también puede descargar la fir...
Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS
CVE-2024-40842: Fuga de Información de XProtectRemediatorDubRobber en macOS Resumen CVE-2024-40842 es una vulnerabilidad de fuga de información local en XProtect Remediator de macOS, relacionada con el módulo: XProtectRemediatorDubRobber La vulnerabilidad surge del manejo inseguro de la variable ...
cve-2024-55591-poc
CVE-2024-55591 - Fortinet FortiOS Authentication Bypass An educational implementation in Go demonstrating the technical mechanics of CVE-2024-55591 , an authentication bypass vulnerability affecting Fortinet FortiOS. This repository is intended strictly for security research, defensive analysis,...
EUVD-2026-78157
A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...
Linux Distros Unpatched Vulnerability : CVE-2026-90685
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsrexeccommandlist of the file laser/lsrdec.c of the component...
Linux Distros Unpatched Vulnerability : CVE-2026-90610
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box...
CVE-2026-90831
A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...
CVE-2026-90825
A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...
CVE-2026-90825 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free
A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...
CVE-2026-90825
CVE-2026-90825 is a use-after-free vulnerability in the MP4Box component of GPAC 26.07.0 , specifically in the gf_node_unregister function within scenegraph/base_scenegraph.c. Exploitation requires local access and low privileges, with no user interaction needed, resulting in a low availability i...
CVE-2026-90825 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free
A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...