15938 matches found
CVE-2026-20804
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...
CVE-2026-20804
CVE-2026-20804 concerns an issue in Windows Hello where an incorrect privilege assignment can enable a local attacker to tamper with biometric authentication locally. The entry identifies the affected area as Windows Hello and the root cause as a privilege/permission misassignment, resulting in p...
CVE-2025-46684
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...
CVE-2025-46684
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...
CVE-2025-46684
Dell SupportAssist OS Recovery (pre-5.5.15.1) contains a flaw where temporary files are created with insecure permissions, enabling a low-privilege local attacker to tamper with information. Affected product: Dell SupportAssist OS Recovery. Root cause: insecure temporary file permissions during c...
CVE-2025-46684
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...
CVE-2025-46684
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...
Windows Hello Tampering Vulnerability
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...
LDAP Tampering Vulnerability
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network...
Windows Hello Tampering Vulnerability
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...
Dell SupportAssist OS Recovery 安全漏洞
Dell SupportAssist OS Recovery is a Dell USA company that provides a recovery environment that contains tools for diagnosing and resolving problems that may occur before the computer boots into the operating system. A security vulnerability exists in Dell SupportAssist OS Recovery versions prior ...
Amazon S3 Encryption Client for Java < 4.0.0 Key Commitment (AWS-2025-032)
The version of Amazon S3 Encryption Client for Java on the remote host is 4.0.0. It is, therefore, affected by a key commitment vulnerability as referenced in the AWS-2025-032 advisory. Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write...
Microsoft Lightweight Directory Access Protocol（LDAP） 输入验证错误漏洞
Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that operates on a layer above the TCP/IP stack. An input validation error vulnerability exists in Microsoft Lightweight Directory Access Protocol LDAP. An attacker could exploit...
PT-2026-2465
Name of the Vulnerable Software and Affected Versions Dell SupportAssist OS Recovery versions prior to 5.5.15.1 Description Dell SupportAssist OS Recovery contains a flaw related to the creation of temporary files with insecure permissions. A local attacker with low privileges could potentially...
PT-2026-2663
Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description An issue with how input is checked in Windows Lightweight Directory Access Protocol LDAP could allow a network attacker who is already authorized to modify the system. This tampering cou...
PT-2026-2698
Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A flaw in Windows Hello’s privilege assignment allows a local attacker to perform tampering on the system. This issue could allow unauthorized access and manipulation of the system...
PT-2026-2657
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw in Windows Hello’s privilege assignment can allow an attacker to perform tampering locally. This issue allows attackers to affect the system. Recommendations At the moment, there is no...
Microsoft Windows Hello 安全漏洞
Microsoft Windows Hello is a biometric-based login from Microsoft Corporation USA that allows you to sign in using your face, fingerprint or PIN. Microsoft Windows Hello has a security vulnerability. An attacker could exploit this vulnerability to tamper with information. The following products a...
The vulnerability of the zipfile module in the CPython interpreter allows attackers to compromise the integrity of protected information.
The vulnerability of the zipfile module in the CPython interpreter is related to incorrect checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...