CVE-2026-83863: Heap-based Buffer Overflow

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85835: Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-85835: Buffer Over-read

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83719: Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-83719: Buffer Over-read

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-96939: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96939: Servicing Stack Updates Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

PT-2026-112711

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs whe...

PT-2026-112745

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when...

PT-2026-112800

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A buffer over-read exists in Servicing Stack Updates, which allows an authorized attacker to disclose sensitive information locally and affect the system. A buffer over-read...

CVE-2026-85318: Heap-based Buffer Overflow

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85318: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85365: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-85365: Heap-based Buffer Overflow

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-83506: Untrusted Search Path

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83506: Servicing Stack Updates Elevation of Privilege Vulnerability

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-109399

SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdatecmsverifyopenssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling intermediate under the same root can emb...

CVE-2026-109399

SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdatecmsverifyopenssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling intermediate under the same root can emb...

UBUNTU-CVE-2026-109399

SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdatecmsverifyopenssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling intermediate under the same root can emb...

CVE-2026-109399 SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates

SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdatecmsverifyopenssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling intermediate under the same root can emb...