PT-2026-89408

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution = 4, the template can specify a sharing group id. The instantiation path passed that value into event creation without verifying that the user...

Linux Distros Unpatched Vulnerability : CVE-2026-61910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special-use role on shared mailboxes. An authenticated user with...

CVE-2026-87609

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-87609

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87609

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87609

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87609

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-74427

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87609

A use after free vulnerability exists in the Sharing component of the Chromium browser, affecting Google Chrome on iOS prior to version 153.0.8010.36 . A remote attacker can exploit this flaw via crafted network traffic to achieve arbitrary code execution outside the sandbox. The vulnerability al...

CVE-2026-87609

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87609: Use After Free

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

SolarWinds Serv-U Privilege Escalation

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

SolarWinds Serv-U Privilege Escalation Command Execution

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute code under the identity of “root”...

Linux Distros Unpatched Vulnerability : CVE-2026-87609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted...

PT-2026-88709

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 153.0.8010.36 Description A use after free issue exists in the Sharing component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remo...

CVE-2026-73014

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally...

CVE-2026-72926

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73765

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally...

CVE-2026-73014

CVE-2026-73014 is a missing authorization flaw in the Data Sharing Service Client , a Microsoft component, that allows an attacker with local, low-privilege access to escalate privileges on the affected system. The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low complex...

CVE-2026-72964

CVE-2026-72964 is a missing authentication vulnerability in Windows Internet Connection Sharing (ICS) . An attacker with low-level local privileges can tamper with critical ICS functions, resulting in a high integrity impact without affecting confidentiality or availability. The CVSS 3.1 score is...