EUVD-2026-57709

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected...

CVE-2026-0295

The provided data identifies CVE-2026-0295 as a race condition in the Palo Alto Networks GlobalProtect client on macOS, allowing a locally authenticated low-privileged attacker to escalate to root. Affected: GlobalProtect macOS client. Not affected: GlobalProtect apps on Linux, Windows, iOS, Andr...

CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected...

CVE-2026-0295

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected...

CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected...

CVE-2026-0294

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected...

CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected...

CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected...

CVE-2026-0294

The CVE-2026-0294 entry concerns a local privilege-escalation in the Palo Alto Networks Prisma Access Agent app affecting Windows and macOS. The vulnerability allows a local user to run code with elevated privileges, enabling higher-privilege control on those platforms. The Prisma Access Agent is...

EUVD-2026-57708

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected...

Traefik 3.7.0 < 3.7.8 Path Traversal Authentication Bypass (CVE-2026-67309)

The version of Traefik installed on the remote macOS host is 3.7.x prior to 3.7.8. It is, therefore, affected by a path traversal vulnerability: - A path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware allows an unauthenticated attacker to craft request...

Microsoft OneDrive for MacOS < 26.095.0519.0003 Elevation of Privilege

The version of Microsoft OneDrive for MacOS installed on the remote macOS host is prior to 26.095.0519.0003. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to...

CVE-2026-50659 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

Prisma Access Agent: Local Privilege Escalation

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected. Work around: No known workarounds...

GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected. Work around: No known workarounds or...

GHSA-9MR8-PWPW-3J2W Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via inconsistent handling of HTTP requests in the System.Net.HttpListener. An attacker can gain unauthorized access to sensitive information by sending specially crafted HTTP requests that exploit discrepancies in...

CVE-2026-73217

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...

CVE-2026-73218

Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access...