CVE-2026-55978

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement...

CVE-2026-64574

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. When new Wi-Fi links are added, an error in the update process can cause debugfs entries to point to memory that has already been freed. A local attacker can exploit this use-after-free vulnerability by accessing these dangling...

CVE-2026-55978 Improper access control vulnerability in CatchPulse

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement...

EUVD-2026-53841

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement...

CVE-2026-55978

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement...

CVE-2026-55978 Improper access control vulnerability in CatchPulse

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement...

CVE-2026-55978

CVE-2026-55978 describes an improper access control vulnerability in CatchPulse that could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse’s security policy enforcement. The NVD entry indicates a local attack vector wi...

CVE-2026-18785

A flaw was found in open62541. A local attacker can exploit a use-after-free vulnerability in the UAClientgetRemoteDataTypes function by performing a specific manipulation. This could potentially lead to limited information disclosure, data corruption, or a Denial of Service DoS...

PT-2026-68456

Name of the Vulnerable Software and Affected Versions CatchPulse affected versions not specified Description An improper access control issue allows a non-administrative local attacker to connect to an unrestricted kernel filter communication port. This action enables the attacker to bypass the...

CVE-2026-55978: Improper Access Control

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement...

PT-2026-68666

Name of the Vulnerable Software and Affected Versions FoundationAgents MetaGPT versions prior to 0.8.3 Description A path traversal issue exists in the read function within the metagpt/tools/libs/editor.py file. This flaw allows a local attacker to access files and directories outside the intende...

PT-2026-68688

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in WebAPKs allows a local attacker to potentially perform a sandbox escape via a malicious file. A sandbox escape is a security...

CVE-2026-20289

Cisco RoomOS contains a vulnerability in its logging subsystem where an authenticated, low-privilege local attacker can access sensitive information by enabling a specific logging level and collecting system logs. The issue arises from logging sensitive data, potentially exposing credentials. Rep...

EUVD-2026-53474

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

CVE-2026-20289 Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

CVE-2026-20289

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

CVE-2026-47763

A flaw was found in pdm, a Python package and dependency manager. This vulnerability allows a local attacker to overwrite arbitrary files on the system. By crafting a malicious repository with symlinks for project-local configuration files, a local user performing pdm operations could inadvertent...

CVE-2026-70597 Electron: Parent process code-sign check is spoofable

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...

EUVD-2026-53403

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...

CVE-2026-70597 Electron: Parent process code-sign check is spoofable

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...