CVE-2026-69482

Windows Error Reporting contains a local tampering vulnerability caused by the creation of a temporary file in a directory with insecure permissions , allowing an authorized attacker to tamper with data locally. The vulnerability is rated CVSS 7.1 (HIGH) with a vector of local attack, low complex...

EUVD-2026-73516

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

Windows Error Reporting Tampering Vulnerability

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

PT-2026-87507

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

CVE-2026-69482: Creation of Temporary File in Directory with Insecure Permissions

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

CVE-2026-85028

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-85028

CVE-2026-85028 affects the FPGA management tool installation component of AWS FPGA Development Kit (aws-fpga) prior to version 2.3.4 . The root cause is the creation of a temporary file in a world-writable directory with insecure permissions. A local attacker with low privileges can place crafted...

EUVD-2026-70652

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

Security Bulletin: Multiple vulnerabilities found in spring-boot-3.3.11.jar - part of IBM webMethods API Management

Summary Multiple vulnerabilities found in spring-boot-3.3.11.jar - part of IBM webMethods API Management have been addressed Vulnerability Details CVEID:CVE-2026-40973 DESCRIPTION: A local attacker on the same host as the application may be able to take control of the directory used by...

gzip security update

1.12-2 - Fix an issue with a temporary file creations when mktemp is missing 41991 - Fix a global buffer overflow vulnerability in the LZH decompression logic 41992 Resolves: CVE-2026-41991 Resolves: CVE-2026-41992...

ALSA-2026:61623 Moderate: gzip security update

The gzip packages contain the gzip GNU zip data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fixes: gzip: gzip: Arbitrary file overwrite via insecure...

CVE-2026-82346: Creation of Temporary File in Directory with Insecure Permissions

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2026-81572 Local Privilege Escalation in CodeMeter Runtime on Windows

In CodeMeter Runtime from version 8.40 to excluding 8.41a and 9.00 to excluding 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before fi...

CVE-2026-81572

CodeMeter Runtime (WibuSystems) on Windows is vulnerable to a local privilege escalation via a predictable temporary file. The cmu.exe executable, when invoked with --create-io --file C:, creates a temporary file under C:\CM-Stick without checking the directory and file paths for NTFS reparse poi...

CVE-2026-47852: Insecure Temporary File

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-80531

A flaw was found in the xfs filesystem component of the Linux kernel. This vulnerability is a Use-After-Free UAF issue, which means that the system attempts to use memory after it has been freed, potentially leading to unpredictable behavior. This specific UAF occurs during the creation of...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by an insecure temporary file vulnerability due to Python Requests library

Summary The Requests library is used by IBM Integrated Analytics System as an HTTP library for Python applications. CVE-2026-25645 affects the requests.utils.extractzippedpaths utility function in Requests versions prior to 2.33.0, which uses a predictable filename when extracting files from zip...

CVE-2026-63404

Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vulnerable to an insecure temporary file flaw that lets a local unprivileged user hijack the Redis configuration and escalate to root. It writes its startup configuration to a...

EUVD-2026-66191

Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vulnerable to an insecure temporary file flaw that lets a local unprivileged user hijack the Redis configuration and escalate to root. It writes its startup configuration to a...