CVE-2026-56174

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...

CVE-2026-50472 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-50472 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

...

EUVD-2026-56287

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2026-50472

The CVE-2026-50472 entry refers to a heap-based buffer overflow in Windows LUA File Virtualization Filter Driver (LUAFV) that allows an authorized, local attacker to achieve privilege escalation. Affected software is Windows LUAFV; the underlying issue is a heap-based overflow, leading to local p...

CVE-2026-50472

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally...

OPENSUSE-SU-2026:21562-1 Security update for go-sendxmpp

This update for go-sendxmpp fixes the following issues: Changes in go-sendxmpp: - Update to 0.17.0: Add --ox-transfer-private-key to transfer the encrypted private key to PEP to transfer it to other devices requires go-xmpp = v0.3.7. Add --ox-receive-private-key to receive the encrypted private k...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

EUVD-2025-210686

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2026-47922 CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)

CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed...

CVE-2026-47922

CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed...

EUVD-2026-56282

CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed...

CVE-2026-47922

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability leading to potential privilege escalation. The issue requires user interaction (victim must visit a crafted URL or interact with a compromised page) and has a CVSSv3.1 base score of 4.7 (Medium) with attack ...

EUVD-2025-210694

Uncontrolled search paths in the Vitis™ Embedded Single File Download SFD for local Windows installation could allow a low-privileged user to create arbitrary code execution...

CVE-2025-0041

CVE-2025-0041 describes uncontrolled search paths in the Vitis Embedded Single File Download (SFD) installer for Windows. The issue could allow a low-privilege local user to achieve arbitrary code execution by abusing the DLL/loader search order and loading a malicious library or executable. The ...

CVE-2025-0041

Uncontrolled search paths in the Vitis™ Embedded Single File Download SFD for local Windows installation could allow a low-privileged user to create arbitrary code execution...

CVE-2026-68327

A flaw was found in the Linux kernel's wanxl driver. During the initialization process, an error handling path in the wanxlpciremoveone function can lead to a null pointer dereference. This occurs when the wanxlreset function attempts to access hardware resources before they are properly mapped,...

CVE-2026-68182

A flaw was found in the Linux kernel's comediparport driver. A local user could trigger a premature interrupt, potentially due to incorrect initialization order of hardware registers or an invalid user-supplied I/O port address. This could lead to a general protection fault, resulting in a system...

CVE-2026-68358

A flaw was found in the Linux kernel's hwmon nzxt-kraken3 component. A race condition exists where the hidhwstop function does not stop device input/output IO. This can lead to a use-after-free UAF vulnerability if a device probe operation fails after IO has been initiated. This vulnerability cou...