PT-2026-63514

Name of the Vulnerable Software and Affected Versions Protegent 360 version 2.0.0.4 Description A local attacker can escalate privileges through the pgsecdl.sys kernel driver. A kernel driver is a program that allows the operating system to communicate with hardware or perform low-level system...

PT-2026-63513

Name of the Vulnerable Software and Affected Versions Protegent 360 version 2.0.0.4 Description A local attacker can cause a denial of service through the sub 13828 function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2026-38766

CVE-2026-38766 describes a local privilege-escalation issue in Unistal Systems Pvt. Ltd. Protegant 360 version 2.0.0.4. Multiple sources (NVD/NVD mirror, EUVD, CVE listing) confirm a flaw in the sub_186f4 function that can be abused by a local attacker to elevate privileges. The CVSS 3.1 score is...

CVE-2026-38763

CVE-2026-38763 affects Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4. The vulnerability arises in the function sub_13828, enabling a local attacker to cause a denial of service. Exploitation would be local with low attacker complexity and low privileges required; no user interaction is needed,...

CVE-2026-38766

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub186f4 function...

CVE-2026-63987

A flaw was found in the Linux kernel's ethtool subsystem. The ethnlupdateprofile function, responsible for updating profile settings, does not properly validate user-controlled input when processing Netlink nest lists. This allows a local attacker to cause an out-of-bounds write, potentially...

CVE-2026-63967

A flaw was found in the Linux kernel's stlsm6dsx driver. This vulnerability occurs in the tagged FIFO First-In, First-Out buffer path, where a buffer on the stack is not properly initialized. A local attacker could exploit this by reading uninitialized memory from the kernel stack, leading to...

CVE-2026-63965

A flaw was found in the Linux kernel's bmp280 pressure sensor driver. The bmp580triggerhandler function fails to initialize a stack-allocated buffer, which can lead to two bytes of uninitialized stack memory being exposed to userspace. This information disclosure vulnerability could allow a local...

CVE-2026-60501

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Service...

CVE-2026-16416

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...

CVE-2026-16416

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...

CVE-2026-16414

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...

CVE-2026-63934

A flaw was found in the Linux kernel's iioitg3200 gyroscope driver. An incorrect I2C Inter-Integrated Circuit read operation in the itg3200readallchannels function causes uninitialized stack memory to be exposed to userspace. This information leak could allow a local attacker to gain access to...

CVE-2026-63936

A flaw was found in the Linux kernel's MediaTek MT6359 Analog-to-Digital Converter ADC driver. The mt6358readimp function does not properly check the return value of a read operation. If the read fails, an uninitialized variable is used, which can lead to the leakage of sensitive information from...

EUVD-2026-46378

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in roaring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

EUVD-2026-46371

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in graph.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-63906

A flaw was found in the Linux kernel's USB subsystem. Specifically, within the omap2430 driver, a memory resource is prematurely released while still in use, leading to a use-after-free vulnerability. This could allow a local attacker to cause a system crash denial of service or potentially execu...

CVE-2026-63903

A flaw was found in the Linux kernel's belkinsa USB serial driver. The driver's interrupt handling routine fails to validate the length of incoming status reports. This oversight allows a local attacker, by connecting a specially crafted USB device, to trigger an out-of-bounds read. The primary...

CVE-2026-63894

A flaw was found in the Linux kernel's FunctionFS ffs component. A race condition exists where a Direct Memory Access Buffer DMABUF cancel operation can occur concurrently with a request completion, leading to a use-after-free vulnerability. This allows a privileged local attacker, such as a...

CVE-2026-63892

A flaw was found in the Linux kernel's Thunderbolt property driver. When processing Thunderbolt properties on a non-root path, a crafted entry with a small entry-length value can lead to an out-of-bounds read. This occurs because the kmemdup function reads beyond the intended memory block and a...