829 matches found
CVE-2026-47078
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
EUVD-2026-49317
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
CVE-2026-47078
The CVE affects Erlang/OTP stdlib’s zip handling (lib/stdlib/src/zip.erl). zip:unzip/1,2 and zip:extract/1,2 validate entry paths with zip:check_dir_level/2, which tracks directory depth; while .. can decrement the counter and normal components increment it, a path like ../x/y may become negative...
CVE-2026-47078
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
CVE-2026-47078 Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
CVE-2026-47078 Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
EEF-CVE-2026-47078 Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
Summary Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:check\dir\level/2, which tracks directory depth as a running...
PT-2026-64979
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:check dir level/2, which tracks directory depth as a running integer...
CVE-2026-56196
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...
CVE-2026-50454
Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally...
CVE-2026-50426
Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network...
CVE-2026-50663
Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network...
CVE-2026-40400
Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network...
EUVD-2026-44251
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...
CVE-2026-50663
CVE-2026-50663 affects Age of Empires II: Definitive Edition. The vulnerability is a relative path traversal in the game that could allow an unauthorized attacker to execute code over the network. The current documents specify the impact as remote code execution with high severity (CVSS 3.1: AV:N...
Windows User Interface Core Elevation of Privilege Vulnerability
Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally...
Windows Admin Center (WAC) Remote Code Execution Vulnerability
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...
PT-2026-58611
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...
PT-2026-58431
Name of the Vulnerable Software and Affected Versions Windows AppResolver affected versions not specified Description An authorization flaw in the Windows AppResolver allows for local privilege escalation. An attacker can exploit this issue to bypass container isolation, moving from a...