18481 matches found
CVE-2026-50452
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-50413
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50410
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50403
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50385
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50345
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50348
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-50340
Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network...
CVE-2026-50322
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.0.0, <=2.0.18)
@fedify/vocab-runtime NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0-dev.1757, =2.0.0-dev.12, =2.0.0-dev.158, =2.0.0-dev.0, =2.0.0-dev.0, =2.0.18 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...
@fedify/cli (>=2.2.0-dev.898, <=2.2.3), @fedify/fedify (>=2.2.0-dev.606, <=2.2.3) +3 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.2.0, <=2.2.3-dev.1098)
@fedify/vocab-runtime NPM version =2.2.0, =2.2.0-dev.898, =2.2.0-dev.606, =2.2.0-dev.606, =2.2.0-dev.606, =2.2.0-dev.606, =2.2.3 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...
@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.205), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.205) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.1.0, <=2.1.14)
@fedify/vocab-runtime NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.0-dev.403, =2.1.0-dev.403, =2.1.0-dev.403, =2.1.0-dev.403, =2.1.14 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...
MAL-2026-10606 Malicious code in base58-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5517883cb10a7c76e95fdf21a4ffce21c13fe1ca42fafc13f5adb021599772 The package's index.js contains multiple Buffer.from... decode sites lines 7, 29, 34, 49, 50 used to reconstruct strings/payloads at runtime — the...
CVE-2026-50350
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally...
CVE-2026-50323
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-58527
CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability
...
