290 matches found
CVE-2026-4255
CVE-2026-4255 Thermalright TR-VISION HOME DLL Side-Loading Privilege Escalation Severity: HIGH CVSS 8.4 CWE: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Published: 16/03/2026 CNA: Toreon Affected versions: Thermalright TR-VISION HOME ≤ 2.0.5 Windows 64-bit Discovered by: Ard3...
Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()
Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...
Security Bulletin: Vulnerability in pip affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in pip has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...
CVE-2025-32463
CVE-2025-32463 Detection Framework A comprehensive security monitoring and detection framework designed to identify exploitation attempts targeting the sudo chroot privilege escalation vulnerability CVE-2025-32463. This project demonstrates advanced threat detection methodologies, incident respon...
CVE-2026-113767
Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-122111
Inclusion of functionality from untrusted control sphere in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally...
CVE-2026-118225
The Windows Advanced Rasterization Platform is vulnerable to a local elevation of privilege vulnerability due to the inclusion of functionality from an untrusted control sphere. An authorized attacker can exploit this issue to gain higher privileges on the system. This vulnerability is addressed ...
CVE-2026-113767
CVE-2026-113767 is a privilege escalation vulnerability in the Windows COM+ Event System Service . The root cause involves the inclusion of functionality from an untrusted control sphere (CWE-829) and untrusted pointer dereference (CWE-822). This flaw allows an authorized attacker to achieve loca...
EUVD-2026-121932
Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-121755
Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
Windows Graphics Kernel Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-144223
Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description An issue exists where the inclusion of functionality from an untrusted control sphere allows an authorized attacker to elevate privileges locally on the system. Recommendation...
PT-2026-143744
Inclusion of functionality from untrusted control sphere in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally...
PT-2026-143598
Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-118268
Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...
CVE-2026-64894: Johnson Controls EasyIO Neo IOManager and Tools Installer: Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and…
Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...
CVE-2026-122160
The myshell-ai AIlice library (versions up to 0.4.0 ) contains a security vulnerability in the HuggingFace Model Wrapper component. Specifically, the LoadModel_PEFT function in ailice/core/llm/AModelCausalLM.py is susceptible to inclusion of functionality from untrusted control sphere (CWE-829). ...
PT-2026-122514
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base model name or path causes inclusion of functionality from untrusted control sphere...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Inclusion of Functionality from Untrusted Control Sphere in pip (CVE-2026-6357)
Summary IBM Watson Speech Services Cartridge is vulnerable to an Inclusion of Functionality from Untrusted Control Sphere in pip. Pip is used in our Speech Service Runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details...
