2026

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalati

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of

In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free. This could lead to

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unn

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unn

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privileg

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unn

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled searc

UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) v

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, F

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file d

Umbraco is an ASP.NET CMS. From 16.2.0 to before 16.5.1 and 17.2.2, An authenticated backoffice user with access to Sett

An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local n

An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who

Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Privilege Management vulnerabilit

A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local pr

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9

A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insuf

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows

OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting ch

An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a l

An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, th

A command injection vulnerability has been reported to affect QuNetSwitch. If a local attacker gains an administrator ac

SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the

SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the w

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could prov

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.4` contai

Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search pa

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to

A flaw was found in virtio-win. The `RhelDoUnMap()` function does not properly validate the number of descriptors provid

A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it

An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predict

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell m

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweig

An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a l