CWE-232 vulnerabilities

CVE-2026-92088 is a high-severity vulnerability in upKeeper Solutions upKeeper Instant Privilege Access that involves improper handling of undefined values. This flaw allows privilege escalation in affected versions up to and including 1.7.1. The vulnerability is identified as CWE-232 and has a CVSS 4.0 base score of 8.6, indicating significant impact if exploited. No patch or remediation details are provided in the available data.

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccProfileXml::ParseBasic()` at `IccXML/IccLibXML/IccProfileXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.