CVE-2026-7483

CVE-2026-7483 describes a local privilege escalation in ESET security applications for macOS that potentially allows a low-privilege attacker to write an arbitrary file with content under a privileged user. The initial and connected documents state the impact as high on confidentiality, integrity...

EUVD-2026-48551

Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...

CVE-2026-7483

Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...

EUVD-2026-48532

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

CVE-2026-49743 GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

PT-2026-64422

Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description The Weintek cMT3092X HMI contains a flaw where it relies on cookies without proper validation and integrity checking during security decisions. This allows a non-privileged user to...

PT-2026-64425

Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description An incorrect permission assignment for critical resources in the Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges. Recommendations At the...

PT-2026-64274

Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...

PT-2026-64264

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

CVE-2026-16270

Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4...

EUVD-2026-47649

Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4...

CVE-2026-65592

n8n is affected by a stored DOM XSS in the Resource Locator component for versions before 1.123.64, 2.29.8, and 2.30.1. The vulnerability arises because the workflow-persisted cachedResultUrl is passed to window.open() without scheme validation. An attacker with workflow creation/editing privileg...

EUVD-2026-47583

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch que...

EUVD-2026-46888

Vulnerability in Oracle Java SE component: Installation. Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE...

EUVD-2026-46734

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Patchset Assistant. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Data...

CVE-2026-63144

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch que...

CVE-2026-63261 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can send a specially crafted request to a Kibana machine learning feature, causing the server to exhaust available memory and become unavailabl...

CVE-2026-63261 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can send a specially crafted request to a Kibana machine learning feature, causing the server to exhaust available memory and become unavailabl...

CVE-2026-63261

CVE-2026-63261 describes an uncontrolled resource consumption (CWE-400) in Kibana, leading to denial of service via excessive memory allocation. The issue is triggered by a low-privileged authenticated user sending specially crafted requests to the Kibana machine learning feature, which can exhau...

CVE-2026-63144 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch que...