7531 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007310)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007310 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Fix UAF ncm object at re-bind after usb ep transport error When ncm function i...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007487)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007487 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidde...
CVE-2026-32214
Improper access control in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
CVE-2026-32075
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-27920
Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-27916
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-27919
Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
GHSA-GPH2-J4C9-VHHR WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks
Summary The YPTSocket plugin's WebSocket server relays attacker-supplied JSON message bodies to every connected client without sanitizing the msg or callback fields. On the client side, plugin/YPTSocket/script.js contains two eval sinks fed directly by those relayed fields...
EUVD-2026-22595
Improper access control in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
EUVD-2026-22593
Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
EUVD-2026-22544
Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...
EUVD-2026-22503
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
EUVD-2026-22459
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-32214
Improper access control in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
CVE-2026-32212
Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
CVE-2026-32156
Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...
CVE-2026-32077
Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-32075
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
