共收录 101 条相关情报。
← 返回所有主题CVE-2026-119333
draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application launched powershell
CVE-2026-116243
pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server
CVE-2026-57203
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
CVE-2026-105477
A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a
CVE-2026-113461
Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library direct
CVE-2026-0315
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate
CVE-2026-83509
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-83506
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
CVE-2026-83505
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevat
CVE-2026-4869
A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compress
CVE-2026-75782
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misc
CVE-2026-75782
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misc
CVE-2026-106505
Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdoc
CVE-2026-104809
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled
CVE-2026-59265
A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted docum
CVE-2026-59265
A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted docum
CVE-2026-19547
Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to t
CVE-2026-87723
In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious bina
CVE-2026-68492
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote
CVE-2026-68492
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote