CVE-2026-65635

Improper Isolation or Compartmentalization vulnerability in malach-it boruta Elixir.Boruta.Openid module allows attackers to register OpenID Connect clients with administrative privileges through the dynamic client registration entry point. Boruta.Openid.registerclient/3 forwards caller-supplied...

CVE-2026-65635 Boruta dynamic client registration allows creation of over-privileged OAuth clients

Improper Isolation or Compartmentalization vulnerability in malach-it boruta Elixir.Boruta.Openid module allows attackers to register OpenID Connect clients with administrative privileges through the dynamic client registration entry point. Boruta.Openid.registerclient/3 forwards caller-supplied...

PT-2021-14586

Name of the Vulnerable Software and Affected Versions Dell Hybrid Client versions prior to 1.5 Description The issue allows a local unauthenticated attacker to exploit it and register the client to a server, potentially viewing sensitive information. Recommendations For versions prior to 1.5,...

CVE-2017-8277

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msmdbaregisterclient, if the client registers failed, it would be freed. However the client was not removed from list. Use-after-free would occur when traversing the list next time...

PT-2017-18253

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises in the msm dba register client function when a client registration fails, leading to a use-after-free scenario...