341311 matches found
The vulnerability of the ModernExecServer.dll library of the Modern Execution Server operating system allows a hacker to exploit their elevated privileges.
The vulnerability of the ModernExecServer.dll library of the Modern Execution Server operating system is related to the use of memory after release. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2026-107166
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description An incorrect authorization weakness exists in a configurable, non-default privilege that allows administrators to delegate limited role-management capabilities to other users scoped to...
CVE-2026-103007: Incorrect Authorization
Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...
RHEL 9 : firefox (RHSA-2026:76742)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76742 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Ceph vulnerability (USN-8867-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8867-1 advisory. It was discovered that the Ceph Object Gateway RGW SigV4 handler did not reject requests carrying x-amz- headers that were absent from the...
CVE-2026-63692: Missing Authentication for Critical Function
Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
RHEL 8 : firefox (RHSA-2026:76745)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:76745 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
PT-2026-106768
Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-mcp versions 3.61.0 through 3.87.0 Description An authenticated user can manage MCP API keys outside the intended account, which allows for privilege escalation through account takeover. Recommendations Update...
PT-2026-106792
Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description An attacker can submit a request to a specific update endpoint to modify collection documents. This occurs when orderable is enabled on a collection ...
PT-2026-106381
Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...
PT-2026-106427
Unauthenticated Privilege Escalation in Taskbot = 6.6 versions...
PT-2026-107277
Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.16.1 Backstage versions prior to 0.17.8 Description The @backstage/backend-defaults package fails to properly preserve access restrictions during service credential delegation. An external service credential...
PT-2026-107211
Name of the Vulnerable Software and Affected Versions ClearPass client software affected versions not specified Description A local privilege escalation issue exists in the ClearPass client software. This flaw allows a low-privileged local user to execute commands with elevated privileges on the...
PT-2026-106483
Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0...
CVE-2026-61421: Use of Hard-coded Credentials
Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
sudo security update
1.9.17-7 - CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-10.2.z 1.9.17-6 - Fix CVE-2026-82474: execveat2 intercept/logsubcmds bypass 1.9.17-5.p2 - Resolves: RHEL-212546 - Use canonicalized path if user path contains '..'...
The vulnerability of the Device Association Service in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Device Association Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-106296: Improper Privilege Management
Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
PT-2026-107050
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A privilege elevation issue exists within the sandbox of Google Chrome on Mac. A remote attacker who has already compromised the renderer process can execute arbitrary code outside the...