#cwe-426

共收录 101 条相关情报。

← 返回所有主题
漏洞预警2026-08-13 发布INFO

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend...

CVE-2026-14673

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and r...

CVE-2026-0299

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

CVE-2026-56174

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of privileg...

CVE-2026-32791

Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged sof...

CVE-2026-20799

Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applicatio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow "include" feature is vulner...

CVE-2026-55522

PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of p

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local...

CVE-2026-41447

FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local attackers to execute arbit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local attackers to execute arbitrary code by placing a crafted openssl.cnf file in the un...

CVE-2026-41447

FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local attackers to execute arbit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a use...

CVE-2026-47211

Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mini-Filter Driver. ...

CVE-2026-18605

A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library A

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code...

CVE-2026-48395

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-28 发布INFO

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code...

CVE-2026-48391

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-28 发布INFO

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vul...

CVE-2026-48395

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could ex...

CVE-2026-48391

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

CVE-2026-11400

Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identif

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-17 发布INFO

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file i...

CVE-2026-63093

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbit

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result...

CVE-2026-48287

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-15 发布INFO

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary...

CVE-2026-48275

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends o...

CVE-2026-48287

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...

CVE-2026-48275

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the c

历史摘要 · 未重新核验 · NVD