Threats tagged 'ghsa-xrrp-gpj2-96j9'

1 threat

Threats tagged 'ghsa-xrrp-gpj2-96j9'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.5	EPSS 0.1%	CVE-2026-96425lomiri-download-manager · Incorrect Permission Assignment for Critical Resource Medium5.5EPSS 0.1%2026-10-16CVE Database V5CVE-2026-96425 CVE-2026-96425 is a medium severity vulnerability in UBports lomiri-download-manager where incorrect DBus policy allows an arbitrary user to execute commands as root. This issue arises from improper permission assignment for a critical resource, enabling privilege escalation via DBus. The vulnerability affects versions from 0.1.0 up to but not including 0.3.3. EPSS 0.1%Vulnerability UBports #cwe-732 #ghsa-xrrp-gpj2-96j9	CVE Database V5	2026-10-16

Showing 1–1 of 1 result