PT-2026-107277

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.16.1 Backstage versions prior to 0.17.8 Description The @backstage/backend-defaults package fails to properly preserve access restrictions during service credential delegation. An external service credential...

PT-2026-107211

Name of the Vulnerable Software and Affected Versions ClearPass client software affected versions not specified Description A local privilege escalation issue exists in the ClearPass client software. This flaw allows a low-privileged local user to execute commands with elevated privileges on the...

PT-2026-106483

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0...

CVE-2026-61421: Use of Hard-coded Credentials

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

sudo security update

1.9.17-7 - CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-10.2.z 1.9.17-6 - Fix CVE-2026-82474: execveat2 intercept/logsubcmds bypass 1.9.17-5.p2 - Resolves: RHEL-212546 - Use canonicalized path if user path contains '..'...

The vulnerability of the Device Association Service in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Device Association Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-106296: Improper Privilege Management

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106492: Improper Privilege Management

Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access restrictions during service credential delegation. An external service credential configured with access restrictions...

PT-2026-106492

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 4.0.0 versions...

PT-2026-107107

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A permission bypass exists in the platform msg handler init function within default msg handlers.c due to a missing permission check. This flaw allows for local...

PT-2026-107212

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager OnGuard agent affected versions not specified Description An arbitrary file write issue exists in the ClearPass Policy Manager OnGuard agent. This flaw allows local users to elevate their privileges and execute arbitra...

ROS-20261006-73-0284

The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Hyper-V component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the web interface of the Azure HDInsight data analytics service’s Apache Ambari allows a hacker to escalate their privileges.

The vulnerability in the Apache Ambari web interface of the Azure HDInsight data analytics service relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the USB Video Driver driver for Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the USB Video Driver driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the biometric service in Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the trusted execution environment allows for attacks on the Virtualization-Based Security (VBS) Enclave of Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the swapping of non-trusted pointers. Exploiting this vulnerability can allow attackers to enhance their privileges...