16921 matches found
PT-2026-32830
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An improper synchronization issue, known as a race condition a situation where the system's behavior depends on the sequence or timing of uncontrollable events, occurs duri...
PT-2026-32828
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An improper synchronization of shared resources during concurrent execution, known as a race condition, allows an authorized attacker to elevate privileges locally...
Microsoft Windows Push Notifications 资源管理错误漏洞
Microsoft Windows Push Notifications is a push notification service provided by Microsoft Corporation. It provides a reliable way to deliver new updates. There is a resource management vulnerability in Microsoft Windows Push Notifications. Attackers can exploit this vulnerability to gain elevated...
PT-2026-32744
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An improper synchronization of shared resources during concurrent execution, known as a race condition, allows an authorized attacker to elevate privileges locally...
Microsoft Windows Push Notifications 资源管理错误漏洞
Microsoft Windows Push Notifications is a push notification service provided by Microsoft Corporation. It provides a reliable way to deliver new updates. There is a resource management vulnerability in Microsoft Windows Push Notifications. Attackers can exploit this vulnerability to gain elevated...
Microsoft Windows Push Notifications 资源管理错误漏洞
Microsoft Windows Push Notifications is a push notification service provided by Microsoft Corporation. It provides a reliable way to deliver new updates. There is a resource management vulnerability in Microsoft Windows Push Notifications. Attackers can exploit this vulnerability to gain elevated...
PT-2026-32829
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An improper synchronization issue, known as a race condition a situation where the system attempts to perform two or more operations at the same time, but because of the...
PT-2026-32749
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description Improper synchronization during concurrent execution using a shared resource, known as a race condition, allows an authorized attacker to elevate privileges locally...
Microsoft Windows Push Notifications 资源管理错误漏洞
Microsoft Windows Push Notifications is a push notification service provided by the American company Microsoft. It provides a reliable way to deliver new updates. There is a resource management vulnerability in Microsoft Windows Push Notifications. Attackers can exploit this vulnerability to gain...
CVE-2026-33657
EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML injection vulnerability that allows any authenticated user with standard non-administrative privileges to inject arbitrary HTML into system-generated email notifications by crafting...
CVE-2026-33657
CVE-2026-33657 affects EspoCRM up to version 9.3.3, where an stored HTML injection vulnerability allows an authenticated user with standard privileges to inject HTML into system-generated email notifications. Root cause: server-side Handlebars templates render the unescaped post field (triple-bra...
CVE-2026-33657 EspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post field
EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML injection vulnerability that allows any authenticated user with standard non-administrative privileges to inject arbitrary HTML into system-generated email notifications by crafting...
CVE-2026-33657 EspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post field
EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML injection vulnerability that allows any authenticated user with standard non-administrative privileges to inject arbitrary HTML into system-generated email notifications by crafting...
CVE-2026-33657 EspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post field
EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML injection vulnerability that allows any authenticated user with standard non-administrative privileges to inject arbitrary HTML into system-generated email notifications by crafting...
CVE-2026-4124
The Ziggeo plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1. The wpajaxziggeoajax handler only verifies a nonce checkajaxreferer but performs no capability checks via currentusercan. Furthermore, the nonce 'ziggeoajaxnonce' is exposed to all...
EUVD-2026-21856
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...
CVE-2026-21006
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...
CVE-2026-21006
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...