Threats Tagged 'ghsa-2g6q-47v3-35cx'

CVE-2026-76967 is a deserialization vulnerability in SAP NetWeaver Business Client version 8.10. The application does not sufficiently validate certain locally stored data during startup, allowing a low-privileged local attacker to replace this data with crafted content. When the application is launched, this crafted content can be processed, potentially leading to arbitrary code execution with the user's privileges. This vulnerability impacts confidentiality, integrity, and availability of the application and is rated with a high severity score of 7.8.