Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004348 advisory. In binderthreadrelease of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003722)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003722 advisory. In pppol2tpconnect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001282 advisory. In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000816 advisory. The adjustbranches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004258 advisory. In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no...

MiracleLinux 7 : pacemaker-1.1.19-8.el7.5 (AXSA:2019-3935:04)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3935:04 advisory. pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc CVE-2018-16877 pacemaker: Insufficient...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004443 advisory. In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001247 advisory. net/packet/afpacket.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishandling of packetfanout data...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004636)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004636 advisory. In eploopcheckproc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no...

MiracleLinux 4 : kernel-2.6.32-358.6.1.el6 (AXSA:2013-454:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-454:03 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

CVE-2021-47810 WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path

WibuKey Runtime 6.51 contains an unquoted service path vulnerability in the WkSvW32.exe service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\PROGRAM FILES X86\WIBUKEY\SERVER\WkSvW32.exe' to inject malicious executables and...

CVE-2021-47810

WibuKey Runtime 6.51 contains an unquoted service path vulnerability in the WkSvW32.exe service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\PROGRAM FILES X86\WIBUKEY\SERVER\WkSvW32.exe' to inject malicious executables and...

CVE-2021-47807

CVE-2021-47807 affects Sync Breeze 13.6.18, where an unquoted Windows service path in the program files directory allows a local attacker to inject a malicious executable and escalate privileges. The vulnerability stems from the unquoted service path in the service configuration, enabling local e...

CVE-2021-47806 Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path

Dup Scout 13.5.28 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Dup Scout Server\bin\dupscts.exe' to inject malicious executables...

CVE-2021-47804 Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path

Wise Care 365 5.6.7.568 contains an unquoted service path vulnerability in the WiseBootAssistant service running with LocalSystem privileges. Attackers can exploit this by inserting a malicious executable in the service path, which will execute with elevated system privileges when the service...

CVE-2021-47803

iFunbox 4.2 contains an unquoted service path vulnerability in the Apple Mobile Device Service that allows local attackers to execute code with elevated privileges. Attackers can insert a malicious executable into the unquoted service path to run with LocalSystem privileges when the service...

CVE-2021-47792

CVE-2021-47792 affects Remote Mouse 4.002 with an unquoted service path in RemoteMouseService. This allows a local attacker to execute arbitrary code with elevated privileges due to path quoting issues. Impact is local code execution with administrator rights and high confidentiality/integrity/av...

CVE-2021-47792 Remote Mouse 4.002 - Unquoted Service Path

Remote Mouse 4.002 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the RemoteMouseService to inject malicious executables and gain administrative access...

CVE-2021-47790

Active WebCam 11.5 is affected by an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated privileges by placing malicious executables in specific directory locations. The flaw affects the service path configuration and is described as a local, pr...

CVE-2021-47790

Active WebCam 11.5 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the misconfigured service path by placing malicious executables in specific directory locations to gain administrative...