2026

NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an in

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memor

Dell PremierColor Panel Driver, versions prior to 1.0.0.1 A01, contains an Improper Access Control vulnerability. A low

Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

BarcodeOCR 19.3.6 contains an unquoted service path vulnerability that allows local attackers to execute code with eleva

CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary

SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by

10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local a

An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to in

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Li

gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gr

Improper access control in the WCF endpoint in Edgemo (now owned by Danoffice IT) Local Admin Service 1.2.7.23180 on Win

Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command

Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command

Outline Service 1.3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arb

Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows service configuration.

Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentia

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows atta

Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: prevent pcp corruption with SMP=n T

Avast SecureLine 5.5.522.0 contains an unquoted service path vulnerability that allows local users to potentially execut

Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows l

Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows

Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users

SpyHunter 4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary cod

BOOTP Turbo 2.0.1214 contains an unquoted service path vulnerability that allows local attackers to potentially execute

DHCP Turbo 4.61298 contains an unquoted service path vulnerability that allows local attackers to potentially execute ar

TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute a

EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerability in the EMP_NSWLSV service that allo

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of serv

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting clie

Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inad

Memory Corruption when multiple threads simultaneously access a memory free API.

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.

A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash she

A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user

The installer for Roland Cloud Manager ver.3.1.19 and prior insecurely loads Dynamic Link Libraries (DLLs), which could

AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local att

Disk Sorter Enterprise 12.4.16 contains an unquoted service path vulnerability that allows local attackers to execute ar

Disk Savvy Enterprise 12.3.18 contains an unquoted service path vulnerability in its service configuration that allows l

Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute ar

VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious execut

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows loc

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate priv

CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through po