Siemens SIMATIC IPCs allow UEFI Secure Boot bypass (CVE-2026-72895)
Physical access attackers can boot arbitrary OS signed with AMI test key; fixes released for BX-21A, RW-543A, and IPC227G series.
Stories per day · 30 days
2 RSS
7 stories, newest first · one card per story
Stories tagged #ipc
Cisco Secure Client posture module allows local privilege escalation
An authenticated local user can send crafted IPC messages and gain limited SYSTEM or root file writes.
A Systematic Study of Security Enforcement at Android Inter-Component Boundaries
Study finds 97 Android IPC enforcement gaps, including URI schemes handling sensitive data.
Telegram Desktop: one-click account takeover via IPC injection
Telegram Desktop through 7.2.8 let a clicked link steal local login files.
11
PoC Released for Telegram Desktop Flaw Enabling One-Click File Account Takeover
Public PoC shows Telegram Desktop before 7.2.9 can leak local files and sessions via a crafted link.
10
[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM
Input Leap through 3.0.3 lets a local Windows user run commands as SYSTEM via unauthenticated IPC.
[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM
Input Leap through 3.0.3 lets a local Windows user run commands as SYSTEM via unauthenticated IPC.