6037 matches found
PT-2026-2748
CVE-2026-20948 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://t.co/RWIO4Ijxeo...
Sandboxie-Plus 代码问题漏洞
Sandboxie-Plus is a sandboxing isolation software from Sandboxie-Plus. A code issue vulnerability exists in Sandboxie-Plus version 5.50.2, which stems from the presence of unquoted service paths to the Windows service SpieSvc, which could lead to the execution of arbitrary code by a local attacke...
ITeCProteccioAppServer 代码问题漏洞
ITeCProteccioAppServer is a backend service component from ITeC. A code issue vulnerability exists in ITeCProteccioAppServer that stems from the service path not being quoted, which could allow a local attacker to execute code and elevate system privileges...
PT-2026-2755
CVE-2026-20956 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. https://t.co/vbIQKtIzx7...
PT-2026-2762
Name of the Vulnerable Software and Affected Versions versions prior to 2026-21219 Description A use after free issue exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a newer version that contai...
PT-2026-2404
Name of the Vulnerable Software and Affected Versions BlueSoleilCS version 5.4.277 Description BlueSoleilCS version 5.4.277 has a security issue related to an unquoted service path in its Windows service configuration. This could allow local attackers to execute arbitrary code. The vulnerable pat...
ProtonVPN 代码问题漏洞
ProtonVPN is a VPN application from ProtonVPN Open Source. A code issue vulnerability exists in ProtonVPN version 1.26.0, which stems from an unquoted WireGuard service configuration path that could allow a local attacker to execute arbitrary code...
MiracleLinux 7 : firefox-128.11.0-1.0.1.el7.AXS7 (AXSA:2025-9973:18)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9973:18 advisory. firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details CVE-2025-5267 firefox: thunderbird: Potential...
Clevo HotKey Clipboard 代码问题漏洞
Clevo HotKey Clipboard is a clipboard enhancement tool from Blue Sky Computer Clevo of Taiwan, China. A code issue vulnerability exists in Clevo HotKey Clipboard version 2.1.0.6, which stems from an unquoted service path, and could lead to a local, unprivileged user executing code with system...
PT-2026-2750
CVE-2026-20950 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. https://t.co/l03CyJMt0H...
Splashtop 代码问题漏洞
Splashtop is a remote desktop software from Splashtop Inc. in the United States. A code issue vulnerability exists in Splashtop version 8.71.12001.0, which stems from an unquoted service path that could allow a local attacker to execute arbitrary code...
PT-2026-2754
CVE-2026-20955 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. https://t.co/woPteDG0yH...
Security Updates for Microsoft Office Online Server (January 2026)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities: - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-20950 - Untrusted pointer...
PT-2026-2753
🟠 CVE-2026-20953 - High Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. https://t.co/3HYe8zgm3r https://t.co/TZ3AHieY4d...
Tftpd32 SE 代码问题漏洞
Tftpd32 SE is an IPv4 web server suite from the Tftpd open source. A code issue vulnerability exists in Tftpd32 SE version 4.60, which stems from unquoted service paths and could lead to a local attacker executing arbitrary code with elevated privileges...
MiracleLinux 8 : firefox-128.11.0-1.el8_10.ML.1 (AXSA:2025-9974:19)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9974:19 advisory. firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details CVE-2025-5267 firefox: thunderbird: Potential...
CVE-2022-50917: Unquoted Search Path or Element
ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...
CVE-2026-20946: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...