Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-32679 | 8.4 high | 0.00% | liveon, canonnwcamplugin.exe, canonnwcampluginforadmin.exe, downloader5installer.exe | The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe) insecurely load Dynamic Link Libraries (DLLs). If a malicious DLL is placed at the same directory, the affected installer may load that DLL and execute its code with the privilege of the user invoking the installer. | Mon 26 Oct |
| CVE-2026-44612 | 8.4 high | 0.00% | no CPE yet | Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer. | Mon 26 Oct |
| CVE-2026-52752 | 8.4 high | 0.00% | nsa, ghidra | Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious extensions with traversal sequences like ../ in filenames to write arbitrary files outside the intended directory, enabling code execution. | Mon 26 Oct |
| CVE-2026-56437 | 8.4 high | 0.00% | no CPE yet | Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege. | Sun 25 Oct |
| CVE-2026-42936 | 8.4 high | 0.00% | no CPE yet | The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer. | Sat 24 Oct |
| CVE-2026-13133 | 8.4 high | 0.00% | no CPE yet | A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy. | 23 Oct |
| CVE-2025-64772 | 8.4 high | 0.00% | no CPE yet | The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer. | 18 Oct |
| CVE-2025-11223 | 8.4 high | 0.00% | no CPE yet | Installer of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL search path, which may lead to loading a crafted DLL file in the same directory. | 12 Oct |
| CVE-2025-57781 | 8.4 high | 0.00% | no CPE yet | The installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer. | 9 Oct |
| CVE-2025-62776 | 8.4 high | 0.00% | no CPE yet | The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application. | 8 Oct |
| CVE-2025-23358 | 8.2 high | 0.00% | no CPE yet | NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges. | 18 Oct |
| CVE-2026-72929 | 7.8 high | — | microsoft, windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 | Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. | 1 h ago |
| CVE-2026-65774 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 6 h ago |
| CVE-2026-62768 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 6 h ago |
| CVE-2026-70347 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 6 h ago |
| CVE-2026-70346 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 6 h ago |
| CVE-2026-70345 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 6 h ago |
| CVE-2026-61925 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | 6 h ago |
| CVE-2026-87700 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-58540 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-50400 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2023-34119 | 7.8 high | 0.00% | zoom, rooms | Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. | Wed 28 Oct |
| CVE-2026-85358 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-85366 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-92374 | 7.8 high | 0.00% | no CPE yet | A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root. | Wed 28 Oct |
| CVE-2026-87694 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | Tue 27 Oct |
| CVE-2026-27910 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-30905 | 7.8 high | 0.00% | zoom, workplace_virtual_desktop_infrastructure | External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via local access. | Mon 26 Oct |
| CVE-2026-30906 | 7.8 high | 0.00% | zoom, rooms | Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. | Mon 26 Oct |
| CVE-2026-14094 | 7.8 high | 0.00% | google, chrome | Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Low) | Sun 25 Oct |
| CVE-2026-68821 | 7.8 high | 0.00% | microsoft, app_installer | Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally. | Sat 24 Oct |
| CVE-2026-14478 | 7.8 high | 0.00% | autodesk, installer | A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability. | 23 Oct |
| CVE-2026-69471 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 23 Oct |
| CVE-2026-71111 | 7.8 high | 0.00% | oracle, identity_manager | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager executes to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). | 22 Oct |
| CVE-2026-70344 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 21 Oct |
| CVE-2026-107571 | 7.8 high | 0.00% | no CPE yet | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent, such as the root of a drive. The installer places the server's programs in the Bin folder of the program folder and gives neither the program folder nor Bin any permissions of their own, so they inherit the parent's. Under the default location, Program Files, ordinary users receive only read and execute and the configuration is not affected; but the installer accepts any path without warning, and a program folder at the root of an NTFS volume inherits write access for a broad group - Authenticated Users (Modify) on a Windows client, Users (create files and folders) on Windows Server. A local user without administrator rights can then alter or replace the service program, which runs as LocalSystem or as the service's virtual account, or the programs an administrator runs elevated from Bin during setup and maintenance, or place a library in Bin that those programs load in place of the system copy, gaining code execution with those privileges. The default Program Files installation is not affected. | 20 Oct |
| CVE-2025-13703 | 7.8 high | 0.00% | no CPE yet | VIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security for PC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions on a folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-27147. | 19 Oct |
| CVE-2026-83767 | 7.8 high | 0.00% | no CPE yet | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 19 Oct |
| CVE-2026-83779 | 7.8 high | 0.00% | no CPE yet | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 19 Oct |
| CVE-2025-64740 | 7.8 high | 0.00% | zoom, workplace_virtual_desktop_infrastructure | Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access. | 18 Oct |
| CVE-2026-85796 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-96308 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-88080 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-87711 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2025-23297 | 7.8 high | 0.00% | no CPE yet | NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges. | 12 Oct |
| CVE-2026-84271 | 7.8 high | 0.00% | ibm, guardium_data_protection | IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges. | 9 Oct |
| CVE-2022-29263 | 7.8 high | 0.00% | f5, access_policy_manager_clients, big-ip_access_policy_manager | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component Installer Service does not use best practice while saving temporary files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated | 8 Oct |
| CVE-2026-107573 | 7.8 high | 0.00% | no CPE yet | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the permissions inherited from the installation folder, by default under Program Files, which give the local Users group read access. Any user who can sign in to the computer could read every stored message, the logs, the built-in database with the accounts' password hashes whenever the service is stopped, and the configuration file, including the database password, which is sealed only with the machine's DPAPI key and can be unsealed by any local account; with an external database that password gives full control of it. The Linux AppImage of 6.3.0 through 6.3.5 likewise created its per-user data folders readable by other local users. | 8 Oct |
| CVE-2025-46774 | 7.8 high | 0.00% | fortinet, forticlient | An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and below, 7.0 all versions may allow a local user to escalate their privileges via FortiClient related executables. | 8 Oct |
| CVE-2025-9870 | 7.8 high | 0.00% | razer, synapse | Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Philips HUE module installer. By creating a symbolic link, an attacker can abuse the installer to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-26375. | 8 Oct |
Download these 171 as CSV · subscribe to this list.
EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.