Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-39929

Lakeside SysTrack Agent LsiAgent.exe Out-of-Bounds Read via UDP

Lakeside SysTrack Agent versions prior to 11.2.1.28, 11.3.0.38, 11.4.0.24, 11.5.0.15 contain an out-of-bounds read vulnerability in the Command ID 30 UDP packet handler that allows remote attackers to crash the application by sending a specially crafted UDP packet. Attackers can send a malformed packet with an invalid memory address at offset 0x4 in the payload to trigger an access violation and cause a denial of service.

CVSS 4.0 · 8.7 High EPSS 1.4% KEV · Not listed
Vendors
Lakesidesoftware
Products
Systrack Agent
CVE-2026-35099

Race Condition in Lakeside SysTrack Agent Enables Local Privilege Escalation

Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM. The fixed versions are 11.2.1.28, 11.3.0.38, 11.4.0.24, and 11.5.0.15.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Lakesidesoftware
Products
Systrack Agent