218915 matches found
CVE-2026-58643 Windows Admin Center Spoofing Vulnerability
...
CVE-2026-58643
CVE-2026-58643 describes an improper neutralization of input during web page generation (XSS) in Windows Admin Center, enabling spoofing over a network. Affected component: Windows Admin Center frontend/web page rendering. Root cause: inadequate input handling during page generation. Impact: netw...
CVE-2026-59117
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network...
CVE-2026-59117 Windows Terminal Remote Code Execution Vulnerability
...
CVE-2026-59117 Windows Terminal Remote Code Execution Vulnerability
...
CVE-2026-59117
CVE-2026-59117 concerns an integer overflow/wraparound in Windows Terminal that enables remote code execution over a network. The NVD/CVE records confirm a network attack vector with high impact (C/H/I/A all high) and a required user interaction, but the provided documents do not specify affected...
CVE-2026-53410
A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges...
CVE-2026-53409
Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access...
CVE-2026-53412
CVE-2026-53412 affects Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows. The root cause is improper input validation, allowing an unauthenticated, network-remote attacker to take over an account. Impact is high (CVE-2026-53412 CVSS v3.1: 9.8, CRITICAL...
CVE-2026-53412 Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access...
CVE-2026-53411
CVE-2026-53411 affects Zoom Workplace VDI Plugin for Windows prior to 6.6.14. The issue is described in CVE sources as an improper input validation that could enable an authenticated local user to escalate privileges. Exploitation details are not provided in the documents. The CVSS v3.1 base scor...
CVE-2026-53411 Zoom Workplace VDI Plugin for Windows - Improper Input Validation
A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges...
CVE-2026-53410 Zoom Clients for Windows - Race Condition
A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges...
CVE-2026-53410
CVE-2026-53410 describes a TOCTOU race condition in the installation and uninstallation flow of certain Zoom Clients for Windows that could allow an authenticated local user to escalate privileges. Affected components include Zoom Workplace for Windows, Zoom Workplace VDI Client, Zoom Workplace V...
CVE-2026-53409
Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access...
CVE-2026-53409
CVE-2026-53409 affects Zoom Rooms for Windows prior to 7.1.0. Root cause: improper privilege management that may allow an authenticated user to escalate privileges via local access. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, low attack complexity, requiring LOW privileges and no us...
Malicious code in telemetry-metrics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca5a92b8a793861df4d3480ffa064564909421659b72e6a9bb1f6af72847f55 The package publishes as unscoped 'telemetry-metrics' while its README, repository, homepage, and bugs metadata all reference the legitimate...
MAL-2026-10750 Malicious code in telemetry-metrics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca5a92b8a793861df4d3480ffa064564909421659b72e6a9bb1f6af72847f55 The package publishes as unscoped 'telemetry-metrics' while its README, repository, homepage, and bugs metadata all reference the legitimate...
MAL-2026-10756 Malicious code in darkglitch (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a84fec55fc625d5e2b337aafe5a9a95ff30c47403241c59dbb33543ec97311a The package installs a listener CLI darkglitch -l -b that opens a WebSocket to the hardcoded signaling host malware-signal.vercel.app and joins the...