CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-50367

CVE-2026-50367 describes an elevation of privilege in the Windows Sensor Data Service due to a logic flaw: incorrect access of an indexable resource (a range error). An authenticated local attacker could exploit this to escalate privileges on the affected system. The vulnerability’s CVSS 3.1 vect...

Windows Sensor Data Service Elevation of Privilege Vulnerability

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

Windows Sensor Data Service Elevation of Privilege Vulnerability

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

PT-2026-58349

Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description An incorrect access of an indexable resource, known as a range error, occurs within the Windows Sensor Data Service. This flaw allows an authorized attacker to elevate the...

CVE-2026-43476

A flaw was found in the Linux kernel, specifically within a module responsible for handling sensor data. This vulnerability is caused by an error in calculating the correct size for a data buffer. An attacker could potentially exploit this issue to corrupt memory, which might lead to the system...

[SECURITY] Fedora 44 Update: qt6-qtgraphs-6.10.3-1.fc44

The Qt Graphs module enables you to visualize data in 3D as bar, scatter, and surface graphs. It's especially useful for visualizing depth maps and large quantities of rapidly changing data, such as data received from multiple sensors. The look and feel of graphs can be customized by using themes...

CVE-2026-26161

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-22386

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-26161

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-26161 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-26161

Technical details such as affected product/component, root cause, impact specifics, or available remediation are not provided in the supplied documents. Monitor official CVE and vendor advisories for updates.

CVE-2026-26161 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

Windows Sensor Data Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in the Microsoft Windows Sensor Data Service. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are...

PT-2026-32739

Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description An untrusted pointer dereference in the Windows Sensor Data Service allows an authorized attacker to elevate privileges locally, which can affect the system. Recommendatio...

CVE-2023-49115

MachineSense devices use unauthenticated MQTT messaging to monitor devices and remote viewing of sensor data by users...

RockyLinux 8 : webkit2gtk3 (RLSA-2025:17802)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:17802 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43272 webkitgtk: Processing maliciously crafted we...

RockyLinux 9 : webkit2gtk3 (RLSA-2025:20922)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20922 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43272 webkitgtk: Processing maliciously crafted we...

AlmaLinux 9 : webkit2gtk3 (ALSA-2025:20922)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:20922 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43272 webkitgtk: Processing maliciously crafted web...