Ni vulnerabilities, page 5

104 vulnerabilities

Known vulnerabilities in Ni products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 37 products.

8.6HighCVE-2026-4129ni · systemlink +1 moreImproper Access Controls in NI SystemLinkThere is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.EPSS0.35%8.5HighCVE-2026-18485ni · ni-palLocal Privilege Escalation in NI-PALThere is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.  This may allow a local, authenticated user to escalate privileges and execute arbitrary code.  This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows.EPSS0.17%7.8HighCVE-2026-18444ni · labviewInteger Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEWThere is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.EPSS0.13%7.8HighCVE-2026-18445ni · labviewInteger Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEWThere is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.EPSS0.13%8.5HighCVE-2026-64195measx · dasylab +1 moreOut Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied dataThere is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.EPSS0.16%8.5HighCVE-2026-64203ni · labviewOut-of-Bounds Read Vulnerability in NI LabVIEW when loading VIThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.EPSS0.19%8.5HighCVE-2026-64197measx · dasylab +1 moreOut Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structureThere is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.EPSS0.16%8.5HighCVE-2026-64196measx · dasylab +1 moreOut Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heapThere is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.EPSS0.16%8.5HighCVE-2026-64201ni · labviewOut-of-Bounds Read Vulnerability in NI LabVIEW when loading VIThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.EPSS0.19%8.5HighCVE-2026-64202ni · labviewOut-of-Bounds Read Vulnerability in NI LabVIEW when loading VIThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.EPSS0.19%8.5HighCVE-2026-64200measx · dasylab +1 moreOut Of Bounds Read in during string conversionwhen parsing a .DSB file in DASYLabThere is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read a past the end of an allocated heap buffer during string conversion.  Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.EPSS0.16%8.5HighCVE-2026-64198measx · dasylab +1 moreOut Of Bounds Read in file handling when parsing a .DSB file in DASYLabThere is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read a few bytes past the end of an allocated heap buffer during file handling.  Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.EPSS0.16%8.6HighCVE-2026-64199measx · dasylab +1 moreOut Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLabThere is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read outside the bounds of an allocated data structure.  Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.EPSS0.16%8.5HighCVE-2026-64204ni · labviewOut-of-Bounds Write Vulnerability in NI LabVIEW when loading VIThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.EPSS0.19%8.5HighCVE-2026-32864ni · labviewOut-of-Bounds Read in mgcore_SH_25_3!aligned_free()There is a memory corruption vulnerability due to an out-of-bounds read in mgcore_SH_25_3!aligned_free() in NI LabVIEW.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.EPSS0.19%8.5HighCVE-2026-32862ni · labviewOut-of-Bounds Write in ResFileFactory::InitResourceMgr()There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.EPSS0.19%8.5HighCVE-2026-32860ni · labviewOut-of-Bounds Write Vulnerability in NI LabVIEW when loading lvlib fileThere is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .lvlib file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.EPSS0.19%8.5HighCVE-2026-32861ni · labviewOut-of-Bounds Write Vulnerability in NI LabVIEW when loading lvclass fileThere is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVCLASS file in NI LabVIEW.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .lvclass file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.EPSS0.19%8.5HighCVE-2026-32863ni · labviewOut-of-Bounds Read in sentry_transaction_context_set_operation()There is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation() in NI LabVIEW.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.EPSS0.19%8.4HighCVE-2026-8036ni · ni-palLocal privilege escalation in NI-PALImproper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.EPSS0.15%