2026

Insecure inherited permissions for some Intel(R) Graphics Software before version 25.30.1702.0 within Ring 3: User Appli

Uncontrolled search path for some AI Playground before version 2.6.1 beta within Ring 3: User Applications may allow an

Incorrect default permissions for some Intel(R) Graphics Driver software within Ring 2: Privileged Process may allow an

Incorrect permission assignment for critical resource for some System Firmware Update Utility (SysFwUpdt) for Intel(R) S

Incorrect default permissions for some Intel(R) Memory and Storage Tool before version 2.5.2 within Ring 3: User Applica

Incorrect default permissions for some Intel(R) Chipset Software before version 10.1.20266.8668 or later. within Ring 3:

Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an a

The system suffers from the absence of a kernel module signature verification. If an attacker can execute commands on be

OpenClaw is a personal AI assistant. In versions 2026.1.12 through 2026.2.12, OpenClaw browser download helpers accepted

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetD

Authentication Bypass Using an Alternate Path or Channel vulnerability in Case-Themes Booked booked allows Authenticatio

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read

A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could a

An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 ma

The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permission

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerabi

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerabilit

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalati

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of

In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free. This could lead to

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unn

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unn

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privileg

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unn

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled searc

UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) v

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, F

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file d

Umbraco is an ASP.NET CMS. From 16.2.0 to before 16.5.1 and 17.2.2, An authenticated backoffice user with access to Sett

An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local n

An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who

Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Privilege Management vulnerabilit

A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local pr

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9

A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insuf

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows

OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting ch

An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a l

An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, th