CVE-2026-19547: Untrusted Search Path

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

PT-2026-102525

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An incorrect permission assignment for critical resources allows a low privileged attacker with local access to elevate their privileges. Recommendations...

EUVD-2026-89423

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint...

CVE-2026-95358: Incorrect Authorization

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95358): chromium -- security fixes

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

CVE-2026-102424: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms 2.4.3.4 - Balbooa Forms accepts upload-field state as Guest-controlled JSON during public form submission. For every object whose id merely looks numeric, the...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95316): chromium -- security fixes

Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. Chromium security severity: Low...

PT-2026-102646

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host versions prior to 15.82 Description Improper path validation in the local IPC Inter-Process Communication service allows a local authenticated user with low privileges to perform arbitrary file writes with...

Linux Distros Unpatched Vulnerability : CVE-2026-97025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users o...

CVE-2026-102620: Integer Overflow or Wraparound

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...

CVE-2026-84414: Incorrect Permission Assignment for Critical Resource

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...

Linux Distros Unpatched Vulnerability : CVE-2026-77913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - hw/display/vga: fix text-mode OOB write after a graphics surface switch CVE-2026-77913 Note that Nessus relies on the...

Amazon Linux 2 : emacs (ALAS-2026-3944)

The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3944 advisory. GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap...

Linux Distros Unpatched Vulnerability : CVE-2026-101910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, the Address6 isPrivate classifier in...

Amazon Linux 2 : policycoreutils (ALAS-2026-3949)

The version of policycoreutils installed on the remote host is prior to 2.5-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3949 advisory. A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When...

CVE-2026-79403

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint...

FreeBSD -- Heap out-of-bounds access in semop(2)

Problem Description: When semop2 blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number embedded in the semaphore set's IPC identifier to detect whether the set was removed while the caller was asleep. This sequence number is...

CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media

WBCE ファイルアップロード XSS - WBCE v1.6.1 著者: Sergio 説明: WBCE v.1.6.1 のファイルアップロードの脆弱性により、ローカルの攻撃者が隠された XSS を含む PDF ファイルをアップロードできます。 攻撃ベクトル: Media ファイルアップロードのサニタイズ処理の脆弱性により、隠された XSS を含む PDF ファイルをアップロードできます。 POC: パネルにログインすると、一般メニューの "Media" セクションに移動します。 隠された XSS を含む PDF ファイルをアップロードすると、それを実行でき、反射型 XSS...

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Microsoft Defender 特权提升漏洞 RedSun 是一种本地权限提升（LPE）技术（及其关联的 PoC），它滥用了 Microsoft Defender 恶意软件保护引擎中的一个链接跟踪漏洞。该漏洞允许低权限认证攻击者通过欺骗 Defender 的修复和云文件回滚机制，将攻击者控制的文件写入受保护目录（例如 C:\Windows\System32），从而获得 SYSTEM 权限。 📋 概述 CVE ID ：CVE-2026-41091 漏洞类型 ：访问文件前未正确解析链接（CWE-59 - 链接跟踪） 受影响组件...

SUSE CVE-2026-100310

GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTORPREFIX environment variable without proper privilege checks. A local attacker can exploit this by setting LIBEXTRACTORPREFIX to a directory containing a malicious plugin that executes arbitrary...