2026

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate priv

CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through po

A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient val

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2,

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker m

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary act

Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attacke

A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bo

A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitra

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg() unconditional requeue If rxrp

In the Linux kernel, the following vulnerability has been resolved: spi: spi-sprd-adi: Fix double free in probe error p

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory corruption due to not set vif

In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as ro

In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix anon_vma UAF on mremap() faulted, unfau

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Fix buffer overflow in config retr

In the Linux kernel, the following vulnerability has been resolved: fou: Don't allow 0 for FOU_ATTR_IPPROTO. fou_udp_r

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in snd_usb_mixe

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the a

In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use cl_is_active to determine wheth

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerabil

melange allows users to build apk packages using declarative pipelines. From version 0.10.0 to before 0.40.3, an attacke

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute

Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attacker

NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configur

TexasSoft CyberPlanet 6.4.131 contains an unquoted service path vulnerability in the CCSrvProxy service that allows loca

Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attac

ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local at

BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNService that allows local attackers to poten

Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Servic

NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows loc

Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary

Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorServic

GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService that allows local attackers to potentia

Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService th

Wacom WTabletService 6.6.7-3 contains an unquoted service path vulnerability that allows local attackers to execute mali

Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.

Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local at

Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potenti

BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service tha

Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows loca

SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local user

JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running with LocalSystem privi

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color