共收录 102 条相关情报。
← 返回所有主题CVE-2026-107052
Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attack
CVE-2026-114148
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
CVE-2026-112357
GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local pri
CVE-2026-110359
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privilege
CVE-2026-105009
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges local
CVE-2026-77364
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined read
CVE-2026-77364
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined read
CVE-2026-108503
ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack s
CVE-2026-78413
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do
CVE-2026-100718
Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender.add API command. When
CVE-2026-100718
Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender.add API command. When
CVE-2026-100718
Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender.add API command. When
CVE-2026-6718
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of appli
CVE-2026-6718
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of appli
CVE-2026-82165
Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vu
CVE-2026-82163
Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability.
CVE-2026-92252
Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privilege
CVE-2026-92252
Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privilege
CVE-2026-87886
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin
CVE-2026-87886
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin