22551 matches found
CVE-2026-50403
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50385
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50345
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50348
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-50340
Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network...
CVE-2026-50322
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.205), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.205) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.1.0, <=2.1.14)
@fedify/vocab-runtime NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.14 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...
halo-record v0.2.7
halo-record Tamper-evident runtime records for AI agents : the audit trail the vendor runs but cannot edit. Every action your agent takes tool calls, model calls, data access, approvals becomes one record in an append-structured, hash-chained log. Any party holding a checkpoint of the chain can...
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...
MAL-2026-10606 Malicious code in base58-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5517883cb10a7c76e95fdf21a4ffce21c13fe1ca42fafc13f5adb021599772 The package's index.js contains multiple Buffer.from... decode sites lines 7, 29, 34, 49, 50 used to reconstruct strings/payloads at runtime — the...
KubeArmor v1.7.5-rc1
KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverages Linux security modules LSMs such as AppArmor, SELinux, or BPF-L...
CVE-2026-50350
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally...
CVE-2026-50323
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability
...
EUVD-2026-44283
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-58527
CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...
CVE-2026-54125 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-54125
CVE-2026-54125 affects Windows Runtime and describes a race-condition vulnerability in concurrent execution on a shared resource that enables local privilege elevation for an authenticated attacker. The CVE is rated with CVSSv3.1 base metrics: AV Local, AC Low, PR Low, UI None, S unchanged, C/H/I...