CVE Vulnerability Catalog

W instalatorze Zoom Rooms dla systemu Windows przed wersją 7.0.0 występuje niezaufana ścieżka wyszukiwania, która może umożliwić uwierzytelnionemu użytkownikowi eskalację uprawnień poprzez lokalny dostęp.

Wtyczka Zoom Workplace VDI dla systemu Windows Universal Installer przed wersją 6.6.11 zawiera podatność na zewnętrzną kontrolę nazwy pliku lub ścieżki. Umożliwia to uwierzytelnionemu użytkownikowi przeprowadzenie eskalacji uprawnień poprzez lokalny dostęp.

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a DoS condition by sending specially crafted network traffic. Panorama and Cloud NGFW are not impacted.

Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS software allow an authenticated administrator to bypass system restrictions and execute arbitrary commands as root. Exploitation requires access to the PAN-OS CLI or Web UI.

An arbitrary file read and delete vulnerability in Palo Alto Networks WildFire WF-500 and WF-500-B appliances in default non-FIPS mode allows reading sensitive information and deleting arbitrary files.

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect app allow a local user to escalate privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux.

A buffer overflow vulnerability in the Palo Alto Networks GlobalProtect app allows a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. The vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent allow a local attacker to bypass authentication controls and execute privileged operations.

A privilege management vulnerability in the Palo Alto Networks Prisma Access Agent allows a locally authenticated non-administrative user to escalate privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. This enables arbitrary code execution and reading of sensitive information otherwise restricted to privileged accounts.

An improper certificate validation vulnerability in Palo Alto Networks Prisma SD-WAN ION allows a man-in-the-middle (MitM) attacker to impersonate the controller.

An incorrect authorization vulnerability in Trust Protection Foundation allows attackers to bypass access controls and perform unauthorized actions on restricted resources.

An information disclosure vulnerability in Trust Protection Foundation allows an authenticated attacker to access sensitive data from the server's vault. Exploitation enables impersonation of any user and arbitrary modification of configuration settings.

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface, allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

A vulnerability in Next.js involves incomplete application of the fix for CVE-2026-44575 in middleware.ts when using Turbopack. It affects versions from 15.2.0 to before 15.5.18 and 16.2.6.

Next.js, a React framework for building full-stack web applications, is vulnerable to connection exhaustion via crafted POST requests to a server action. This affects applications using Partial Prerendering through the Cache Components feature, where a malicious request can cause a request-body handling deadlock, leaving connections open for an extended period.

Next.js versions from 13.4.13 to before 15.5.16 and 16.2.5 are vulnerable to server-side request forgery (SSRF) via crafted WebSocket upgrade requests. An attacker can force the server to proxy requests to arbitrary internal or external destinations, potentially exposing internal services or cloud metadata endpoints.

A vulnerability in the vm2 library for Node.js prior to version 3.11.0 allows sandboxed code to call Buffer.alloc() with an arbitrary size, allocating memory directly on the host heap. Because Buffer.alloc is a synchronous C++ native call, vm2's timeout option cannot interrupt it, enabling a single request to exhaust host memory and crash the process.

A sandbox escape vulnerability in vm2 before 3.11.0 allows sandboxed code to crash the host Node.js process via a Promise constructor triggering an unhandled rejection. The issue affects version 3.10.5 and is fixed in 3.11.0.

In vm2 3.10.5, the NodeVM require.root path restriction can be bypassed using filesystem symlinks, allowing sandboxed code to load modules from outside the allowed root directory in host context. Because path validation uses path.resolve() (which does not dereference symlinks) but module loading uses Node's native require() (which does), an attacker can load arbitrary host-realm modules and achieve remote code execution.

An authentication bypass vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on the management interface and lower when other login interfaces are used.