CWE-426

Local privilege escalation in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Che

Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide defaul

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when install

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influ

OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY c

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-der

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.

OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulner

A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows. The impacted element is the function get_system_dpi of t

Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally.

A vulnerability was identified in Unidocs ezPDF DRM Reader and ezPDF Reader 2.0/3.0.0.4. This affects an unknown part in

A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown functi

A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functional

A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase

A security flaw has been discovered in Flos Freeware Notepad2 4.2.25. This affects an unknown function in the library PR

A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextSha

A security flaw has been discovered in UltraVNC up to 1.6.4.0. Affected by this issue is some unknown functionality in t

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed th

A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown process

A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library A

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1),

pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's binary fetcher allows mali

Greenshot is an open source Windows screenshot utility. Versions 1.3.312 and below have untrusted executable search path

Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical atta

OpenClaw versions prior to 2026.2.24 contain a policy bypass vulnerability in the safeBins allowlist evaluation that tru

rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.32.0, RTK (Rust Token Killer)

openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration file resolution fla

IBM App Connect Enterprise Certified Container CD: 11.2.0 through 11.6.0, 12.1.0 through 12.19.0 and 12.0 LTS: 12.0.0 th

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability ex

A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRole can inject arbitra

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search

Tanium addressed an improper input validation vulnerability in Tanium Appliance.

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark device

Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to

Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applicatio

Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and