128 matches found
CVE-2026-48980
pamusb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv environment variables XRDPSESSION, DISPLAY and TMUX allow environment variable injection into local-check logic. These environment variables influence whether a current session is local or...
CVE-2026-47270
pamusb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pamusb is a PAM module loaded into the host process sudo, login, GDM, GNOME Shell. Display managers such as GDM run multiple concurrent authentication threads. Three functions used by the denyremote...
The vulnerability of the Windows Local Session Manager (LSM) component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows Local Session Manager LSM component of the Windows operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-20869
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...
CVE-2026-20869
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...
CVE-2026-20869
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...
CVE-2026-20869 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
...
CVE-2026-20869 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
...
CVE-2026-20869
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...
Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...
PT-2026-2714
Name of the Vulnerable Software and Affected Versions Windows Local Session Manager LSM affected versions not specified Description A flaw exists in Windows Local Session Manager LSM related to concurrent execution using a shared resource with improper synchronization, creating a race condition...
CVE-2026-20869: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...
CVE-2020-23139
Microweber 1.1.18 is affected by broken authentication and session management. Local session hijacking may occur, which could result in unauthorized access to system data or functionality, or a complete system compromise...
CVE-2025-65561
An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via crafted header Local SEID to the PFCP Session Modification Request...
CVE-2025-64711
CVE-2025-64711 affects PrivateBin versions 1.7.7–2.0.3. A drag-and-drop filename containing HTML is rendered as HTML in the drag-and-drop helper, enabling self‑XSS in the victim’s session on macOS/Linux when file uploads are enabled. An attacker must entice the user to attach a maliciously named ...
PT-2025-46774
Name of the Vulnerable Software and Affected Versions PrivateBin versions 1.7.7 through 2.0.2 Description PrivateBin is an online pastebin system designed with zero knowledge of pasted data. Versions from 1.7.7 up to 2.0.2 are susceptible to a self-cross-site scripting issue. Dragging a file with...
The vulnerability of the Windows Local Session Manager (LSM) component in Windows operating systems allows a hacker to trigger a service failure.
The vulnerability of the Windows Local Session Manager LSM component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the Windows Local Session Manager (LSM) component in Windows operating systems allows a hacker to trigger a service failure.
The vulnerability of the Windows Local Session Manager LSM component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the Windows Local Session Manager component in Windows operating systems allows a hacker to trigger a service failure.
The vulnerability of the Windows Local Session Manager component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to cause service interruptions from a remote location...