83 matches found
CVE-2026-56728
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerability exists in Zammad's GraphQL API. An authenticated user can access taskbar item data belonging to another user by crafting a request with the target user's taskbar identifier. T...
CVE-2026-56728 Zammad: Cross-User Taskbar Item Access Control Vulnerability
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerability exists in Zammad's GraphQL API. An authenticated user can access taskbar item data belonging to another user by crafting a request with the target user's taskbar identifier. T...
EUVD-2026-87221
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerability exists in Zammad's GraphQL API. An authenticated user can access taskbar item data belonging to another user by crafting a request with the target user's taskbar identifier. T...
CVE-2026-56728 Zammad: Cross-User Taskbar Item Access Control Vulnerability
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerability exists in Zammad's GraphQL API. An authenticated user can access taskbar item data belonging to another user by crafting a request with the target user's taskbar identifier. T...
CVE-2026-56728
The open source helpdesk system Zammad contains a broken access control vulnerability in its GraphQL API prior to version 7.0.2 . An authenticated user can exploit this by crafting a request with a target user's taskbar identifier to read their taskbar item data . This data includes transient ses...
CVE-2026-56728 Zammad: Cross-User Taskbar Item Access Control Vulnerability
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerability exists in Zammad's GraphQL API. An authenticated user can access taskbar item data belonging to another user by crafting a request with the target user's taskbar identifier. T...
MAL-2026-15514 Malicious code in mintel-taskbar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebda78171ac8816c0e350f84923af0bad54c075f91cfcc1a7bcc26d36674c4f package.json line 11 declares the package's own name 'mintel-taskbar' as a dependency whose source is the bare HTTPS URL...
Malicious code in mintel-taskbar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebda78171ac8816c0e350f84923af0bad54c075f91cfcc1a7bcc26d36674c4f package.json line 11 declares the package's own name 'mintel-taskbar' as a dependency whose source is the bare HTTPS URL...
CVE-2026-50293
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally...
CVE-2026-50293
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally...
CVE-2026-50293
CVE-2026-50293 describes a use-after-free in the Windows Internal Task Bar that allows an authorized user to elevate privileges locally. The available data cite a CVSS v3.1 base score of 7.8 (High) with Local attack vector, Low attack complexity, and Low privileges required; outcomes include High...
CVE-2026-50293 Windows Internal Task Bar Elevation of Privilege Vulnerability
...
CVE-2026-50293 Windows Internal Task Bar Elevation of Privilege Vulnerability
...
Windows Internal Task Bar Elevation of Privilege Vulnerability
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally...
The vulnerability of the Windows Taskbar Live component on Windows operating systems allows a perpetrator to disclose protected information.
The vulnerability of the Windows Taskbar Live component in operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2025-59294
Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack...
EUVD-2025-34359
Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack...
CVE-2025-59294
Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack...