{"schemaVersion":1,"id":"CVE-2026-97381","requestedId":"CVE-2026-97381","aliases":[],"status":"published","rawState":"Received","rawSeverityStatus":"Received","duplicateOf":null,"indexable":true,"title":null,"description":"Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the permitted list falls through without setting E_ACCESSDENIED, causing IsPermitted to return S_OK. An attacker who induces a user to visit a malicious webpage in Internet Explorer can invoke the control to enumerate update and system information, install updates without consent, display dialogs, or restart the computer when a reboot is pending. This issue was fixed in Legacy Update 1.13.2.","dates":{"published":"2026-10-13T21:08:05.334Z","modified":"2026-10-13T21:08:05.334Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.9,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"cve.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"cve.org","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"nvd","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00213,"percentile":0.10821,"severity":"low","asOf":"2026-10-14T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-14T00:00:00.000Z","score":0.00213,"percentile":0.10821}],"last30":[{"date":"2026-10-14T00:00:00.000Z","score":0.00213,"percentile":0.10821}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","evidence":[]},"exploits":[],"exploitCount":0,"exploitSources":[],"weaknesses":[{"id":"CWE-346","name":"Origin Validation Error","description":"The product does not properly verify that the source of data or communication is valid.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/346.html","capec":[{"id":"CAPEC-111","name":"JSON Hijacking (aka JavaScript Hijacking)","url":"https://capec.mitre.org/data/definitions/111.html"},{"id":"CAPEC-141","name":"Cache Poisoning","url":"https://capec.mitre.org/data/definitions/141.html"},{"id":"CAPEC-142","name":"DNS Cache Poisoning","url":"https://capec.mitre.org/data/definitions/142.html"},{"id":"CAPEC-160","name":"Exploit Script-Based APIs","url":"https://capec.mitre.org/data/definitions/160.html"},{"id":"CAPEC-21","name":"Exploitation of Trusted Identifiers","url":"https://capec.mitre.org/data/definitions/21.html"},{"id":"CAPEC-384","name":"Application API Message Manipulation via Man-in-the-Middle","url":"https://capec.mitre.org/data/definitions/384.html"},{"id":"CAPEC-385","name":"Transaction or Event Tampering via Application API Manipulation","url":"https://capec.mitre.org/data/definitions/385.html"},{"id":"CAPEC-386","name":"Application API Navigation Remapping","url":"https://capec.mitre.org/data/definitions/386.html"},{"id":"CAPEC-387","name":"Navigation Remapping To Propagate Malicious Content","url":"https://capec.mitre.org/data/definitions/387.html"},{"id":"CAPEC-388","name":"Application API Button Hijacking","url":"https://capec.mitre.org/data/definitions/388.html"},{"id":"CAPEC-510","name":"SaaS User Request Forgery","url":"https://capec.mitre.org/data/definitions/510.html"},{"id":"CAPEC-59","name":"Session Credential Falsification through Prediction","url":"https://capec.mitre.org/data/definitions/59.html"},{"id":"CAPEC-60","name":"Reusing Session IDs (aka Session Replay)","url":"https://capec.mitre.org/data/definitions/60.html"},{"id":"CAPEC-75","name":"Manipulating Writeable Configuration Files","url":"https://capec.mitre.org/data/definitions/75.html"},{"id":"CAPEC-76","name":"Manipulating Web Input to File System Calls","url":"https://capec.mitre.org/data/definitions/76.html"},{"id":"CAPEC-89","name":"Pharming","url":"https://capec.mitre.org/data/definitions/89.html"}],"techniques":[{"id":"T1134","name":"Access Token Manipulation","url":"https://attack.mitre.org/techniques/T1134/","tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0111","name":"Privilege Escalation"}]},{"id":"T1134.001","name":"Token Impersonation/Theft","url":"https://attack.mitre.org/techniques/T1134/001/","tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0111","name":"Privilege Escalation"}]},{"id":"T1528","name":"Steal Application Access Token","url":"https://attack.mitre.org/techniques/T1528/","tactics":[{"id":"TA0031","name":"Credential Access"}]},{"id":"T1539","name":"Steal Web Session Cookie","url":"https://attack.mitre.org/techniques/T1539/","tactics":[{"id":"TA0031","name":"Credential Access"}]},{"id":"T1550.004","name":"Web Session Cookie","url":"https://attack.mitre.org/techniques/T1550/004/","tactics":[{"id":"TA0109","name":"Lateral Movement"}]},{"id":"T1557.002","name":"ARP Cache Poisoning","url":"https://attack.mitre.org/techniques/T1557/002/","tactics":[{"id":"TA0031","name":"Credential Access"},{"id":"TA0100","name":"Collection"}]},{"id":"T1584.002","name":"DNS Server","url":"https://attack.mitre.org/techniques/T1584/002/","tactics":[{"id":"TA0042","name":"Resource Development"}]}],"countermeasures":[{"id":"D3-ABPI","name":"Application-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-ABPI/"},{"id":"D3-AEM","name":"Application Exception Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-AEM/"},{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-ANCI","name":"Authentication Cache Invalidation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ANCI/"},{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-CCSA","name":"Credential Compromise Scope Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CCSA/"},{"id":"D3-CH","name":"Credential Hardening","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CH/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-CR","name":"Credential Revocation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-CR/"},{"id":"D3-CRO","name":"Credential Rotation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CRO/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-CTS","name":"Credential Transmission Scoping","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CTS/"},{"id":"D3-DUC","name":"Decoy User Credential","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DUC/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-HR","name":"Host Reboot","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HR/"},{"id":"D3-HS","name":"Host Shutdown","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HS/"},{"id":"D3-KBPI","name":"Kernel-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-KBPI/"},{"id":"D3-MFA","name":"Multi-factor Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-MFA/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-OPM","name":"Operational Process Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-OPM/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PLA","name":"Process Lineage Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PLA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-PS","name":"Process Suspension","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PS/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-PSMD","name":"Process Self-Modification Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSMD/"},{"id":"D3-PT","name":"Process Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PT/"},{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RIC","name":"Reissue Credential","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RIC/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-ST","name":"Session Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ST/"},{"id":"D3-TB","name":"Token Binding","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TB/"},{"id":"D3-TBA","name":"Token-based Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TBA/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"},{"id":"D3-WSAM","name":"Web Session Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-WSAM/"}]},{"id":"CWE-393","name":"Return of Wrong Status Code","description":"A function or operation returns an incorrect return value or status code that does not indicate the true result of execution, causing the product to modify its behavior based on the incorrect result.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/393.html","capec":[],"techniques":[],"countermeasures":[]}],"ttp":{"capecs":[{"id":"CAPEC-111","name":"JSON Hijacking (aka JavaScript Hijacking)","url":"https://capec.mitre.org/data/definitions/111.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-141","name":"Cache Poisoning","url":"https://capec.mitre.org/data/definitions/141.html","weaknessIds":["CWE-346"],"techniqueIds":["T1557.002"]},{"id":"CAPEC-142","name":"DNS Cache Poisoning","url":"https://capec.mitre.org/data/definitions/142.html","weaknessIds":["CWE-346"],"techniqueIds":["T1584.002"]},{"id":"CAPEC-160","name":"Exploit Script-Based APIs","url":"https://capec.mitre.org/data/definitions/160.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-21","name":"Exploitation of Trusted Identifiers","url":"https://capec.mitre.org/data/definitions/21.html","weaknessIds":["CWE-346"],"techniqueIds":["T1134","T1528","T1539"]},{"id":"CAPEC-384","name":"Application API Message Manipulation via Man-in-the-Middle","url":"https://capec.mitre.org/data/definitions/384.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-385","name":"Transaction or Event Tampering via Application API Manipulation","url":"https://capec.mitre.org/data/definitions/385.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-386","name":"Application API Navigation Remapping","url":"https://capec.mitre.org/data/definitions/386.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-387","name":"Navigation Remapping To Propagate Malicious Content","url":"https://capec.mitre.org/data/definitions/387.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-388","name":"Application API Button Hijacking","url":"https://capec.mitre.org/data/definitions/388.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-510","name":"SaaS User Request Forgery","url":"https://capec.mitre.org/data/definitions/510.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-59","name":"Session Credential Falsification through Prediction","url":"https://capec.mitre.org/data/definitions/59.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-60","name":"Reusing Session IDs (aka Session Replay)","url":"https://capec.mitre.org/data/definitions/60.html","weaknessIds":["CWE-346"],"techniqueIds":["T1134.001","T1550.004"]},{"id":"CAPEC-75","name":"Manipulating Writeable Configuration Files","url":"https://capec.mitre.org/data/definitions/75.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-76","name":"Manipulating Web Input to File System Calls","url":"https://capec.mitre.org/data/definitions/76.html","weaknessIds":["CWE-346"],"techniqueIds":[]},{"id":"CAPEC-89","name":"Pharming","url":"https://capec.mitre.org/data/definitions/89.html","weaknessIds":["CWE-346"],"techniqueIds":[]}],"techniques":[{"id":"T1134","name":"Access Token Manipulation","url":"https://attack.mitre.org/techniques/T1134/","weaknessIds":["CWE-346"],"capecIds":["CAPEC-21"],"tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0111","name":"Privilege Escalation"}],"countermeasures":[{"id":"D3-AEM","name":"Application Exception Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-AEM/"},{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-ANCI","name":"Authentication Cache Invalidation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ANCI/"},{"id":"D3-CCSA","name":"Credential Compromise Scope Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CCSA/"},{"id":"D3-CH","name":"Credential Hardening","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CH/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-CR","name":"Credential Revocation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-CR/"},{"id":"D3-CRO","name":"Credential Rotation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CRO/"},{"id":"D3-CTS","name":"Credential Transmission Scoping","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CTS/"},{"id":"D3-DUC","name":"Decoy User Credential","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DUC/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-MFA","name":"Multi-factor Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-MFA/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-OPM","name":"Operational Process Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-OPM/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RIC","name":"Reissue Credential","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RIC/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-ST","name":"Session Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ST/"},{"id":"D3-TB","name":"Token Binding","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TB/"},{"id":"D3-TBA","name":"Token-based Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TBA/"}]},{"id":"T1134.001","name":"Token Impersonation/Theft","url":"https://attack.mitre.org/techniques/T1134/001/","weaknessIds":["CWE-346"],"capecIds":["CAPEC-60"],"tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0111","name":"Privilege Escalation"}],"countermeasures":[{"id":"D3-ANCI","name":"Authentication Cache Invalidation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ANCI/"},{"id":"D3-CCSA","name":"Credential Compromise Scope Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CCSA/"},{"id":"D3-CH","name":"Credential Hardening","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CH/"},{"id":"D3-CR","name":"Credential Revocation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-CR/"},{"id":"D3-CRO","name":"Credential Rotation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CRO/"},{"id":"D3-CTS","name":"Credential Transmission Scoping","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CTS/"},{"id":"D3-DUC","name":"Decoy User Credential","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DUC/"},{"id":"D3-MFA","name":"Multi-factor Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-MFA/"},{"id":"D3-RIC","name":"Reissue Credential","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RIC/"},{"id":"D3-TB","name":"Token Binding","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TB/"},{"id":"D3-TBA","name":"Token-based Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TBA/"}]},{"id":"T1528","name":"Steal Application Access Token","url":"https://attack.mitre.org/techniques/T1528/","weaknessIds":["CWE-346"],"capecIds":["CAPEC-21"],"tactics":[{"id":"TA0031","name":"Credential Access"}],"countermeasures":[{"id":"D3-ANCI","name":"Authentication Cache Invalidation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ANCI/"},{"id":"D3-CCSA","name":"Credential Compromise Scope Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CCSA/"},{"id":"D3-CH","name":"Credential Hardening","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CH/"},{"id":"D3-CR","name":"Credential Revocation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-CR/"},{"id":"D3-CRO","name":"Credential Rotation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CRO/"},{"id":"D3-CTS","name":"Credential Transmission Scoping","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CTS/"},{"id":"D3-DUC","name":"Decoy User Credential","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DUC/"},{"id":"D3-MFA","name":"Multi-factor Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-MFA/"},{"id":"D3-RIC","name":"Reissue Credential","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RIC/"},{"id":"D3-TB","name":"Token Binding","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TB/"},{"id":"D3-TBA","name":"Token-based Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TBA/"}]},{"id":"T1539","name":"Steal Web Session Cookie","url":"https://attack.mitre.org/techniques/T1539/","weaknessIds":["CWE-346"],"capecIds":["CAPEC-21"],"tactics":[{"id":"TA0031","name":"Credential Access"}],"countermeasures":[{"id":"D3-ANCI","name":"Authentication Cache Invalidation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ANCI/"},{"id":"D3-CCSA","name":"Credential Compromise Scope Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CCSA/"},{"id":"D3-CH","name":"Credential Hardening","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CH/"},{"id":"D3-CR","name":"Credential Revocation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-CR/"},{"id":"D3-CRO","name":"Credential Rotation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CRO/"},{"id":"D3-CTS","name":"Credential Transmission Scoping","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CTS/"},{"id":"D3-DUC","name":"Decoy User Credential","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DUC/"},{"id":"D3-MFA","name":"Multi-factor Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-MFA/"},{"id":"D3-RIC","name":"Reissue Credential","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RIC/"}]},{"id":"T1550.004","name":"Web Session Cookie","url":"https://attack.mitre.org/techniques/T1550/004/","weaknessIds":["CWE-346"],"capecIds":["CAPEC-60"],"tactics":[{"id":"TA0109","name":"Lateral Movement"}],"countermeasures":[{"id":"D3-ABPI","name":"Application-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-ABPI/"},{"id":"D3-ANCI","name":"Authentication Cache Invalidation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ANCI/"},{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-CCSA","name":"Credential Compromise Scope Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CCSA/"},{"id":"D3-CH","name":"Credential Hardening","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CH/"},{"id":"D3-CR","name":"Credential Revocation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-CR/"},{"id":"D3-CRO","name":"Credential Rotation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CRO/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-CTS","name":"Credential Transmission Scoping","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CTS/"},{"id":"D3-DUC","name":"Decoy User Credential","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DUC/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-HR","name":"Host Reboot","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HR/"},{"id":"D3-HS","name":"Host Shutdown","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HS/"},{"id":"D3-KBPI","name":"Kernel-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-KBPI/"},{"id":"D3-MFA","name":"Multi-factor Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-MFA/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PLA","name":"Process Lineage Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PLA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-PS","name":"Process Suspension","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PS/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-PSMD","name":"Process Self-Modification Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSMD/"},{"id":"D3-PT","name":"Process Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PT/"},{"id":"D3-RIC","name":"Reissue Credential","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RIC/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"},{"id":"D3-WSAM","name":"Web Session Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-WSAM/"}]},{"id":"T1557.002","name":"ARP Cache Poisoning","url":"https://attack.mitre.org/techniques/T1557/002/","weaknessIds":["CWE-346"],"capecIds":["CAPEC-141"],"tactics":[{"id":"TA0031","name":"Credential Access"},{"id":"TA0100","name":"Collection"}],"countermeasures":[{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}]},{"id":"T1584.002","name":"DNS Server","url":"https://attack.mitre.org/techniques/T1584/002/","weaknessIds":["CWE-346"],"capecIds":["CAPEC-142"],"tactics":[{"id":"TA0042","name":"Resource Development"}],"countermeasures":[]}],"countermeasures":[{"id":"D3-ABPI","name":"Application-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-ABPI/"},{"id":"D3-AEM","name":"Application Exception Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-AEM/"},{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-ANCI","name":"Authentication Cache Invalidation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ANCI/"},{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-CCSA","name":"Credential Compromise Scope Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CCSA/"},{"id":"D3-CH","name":"Credential Hardening","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CH/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-CR","name":"Credential Revocation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-CR/"},{"id":"D3-CRO","name":"Credential Rotation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CRO/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-CTS","name":"Credential Transmission Scoping","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CTS/"},{"id":"D3-DUC","name":"Decoy User Credential","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DUC/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-HR","name":"Host Reboot","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HR/"},{"id":"D3-HS","name":"Host Shutdown","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HS/"},{"id":"D3-KBPI","name":"Kernel-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-KBPI/"},{"id":"D3-MFA","name":"Multi-factor Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-MFA/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-OPM","name":"Operational Process Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-OPM/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PLA","name":"Process Lineage Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PLA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-PS","name":"Process Suspension","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PS/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-PSMD","name":"Process Self-Modification Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSMD/"},{"id":"D3-PT","name":"Process Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PT/"},{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RIC","name":"Reissue Credential","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RIC/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-ST","name":"Session Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ST/"},{"id":"D3-TB","name":"Token Binding","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TB/"},{"id":"D3-TBA","name":"Token-based Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TBA/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"},{"id":"D3-WSAM","name":"Web Session Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-WSAM/"}],"countermeasuresByTactic":[{"tactic":"Harden","items":[{"id":"D3-CH","name":"Credential Hardening","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CH/"},{"id":"D3-CRO","name":"Credential Rotation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CRO/"},{"id":"D3-MFA","name":"Multi-factor Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-MFA/"},{"id":"D3-TB","name":"Token Binding","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TB/"},{"id":"D3-TBA","name":"Token-based Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-TBA/"}]},{"tactic":"Detect","items":[{"id":"D3-AEM","name":"Application Exception Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-AEM/"},{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-CCSA","name":"Credential Compromise Scope Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CCSA/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-OPM","name":"Operational Process Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-OPM/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PLA","name":"Process Lineage Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PLA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-PSMD","name":"Process Self-Modification Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSMD/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}]},{"tactic":"Isolate","items":[{"id":"D3-ABPI","name":"Application-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-ABPI/"},{"id":"D3-CTS","name":"Credential Transmission Scoping","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CTS/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-KBPI","name":"Kernel-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-KBPI/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-WSAM","name":"Web Session Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-WSAM/"}]},{"tactic":"Evict","items":[{"id":"D3-ANCI","name":"Authentication Cache Invalidation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ANCI/"},{"id":"D3-CR","name":"Credential Revocation","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-CR/"},{"id":"D3-HR","name":"Host Reboot","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HR/"},{"id":"D3-HS","name":"Host Shutdown","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HS/"},{"id":"D3-PS","name":"Process Suspension","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PS/"},{"id":"D3-PT","name":"Process Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PT/"},{"id":"D3-ST","name":"Session Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-ST/"}]},{"tactic":"Restore","items":[{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RIC","name":"Reissue Credential","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RIC/"}]},{"tactic":"Deceive","items":[{"id":"D3-DUC","name":"Decoy User Credential","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DUC/"}]},{"tactic":"Model","items":[{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"}]}]},"affected":[{"vendor":"legacyupdate","product":"legacyupdate","name":"LegacyUpdate","label":"legacyupdate","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"source":null,"versions":[{"text":"≥ 1.12.0, < 1.13.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.12.0, < 1.13.2","eol":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/LegacyUpdate/LegacyUpdate/security/advisories/GHSA-f4g7-4gmx-jfgf","label":"github.com/LegacyUpdate/LegacyUpdate/security/advisories/GHSA-f4g7-4gmx-jfgf","hostname":"github.com","tags":["X Refsource CONFIRM"],"sources":["cve.org","nvd"]},{"url":"https://github.com/LegacyUpdate/LegacyUpdate/commit/7d62f0bfaa770d74cd6e2cb0bac9c1907df48033","label":"github.com/LegacyUpdate/LegacyUpdate/commit/7d62f0bfaa770d74cd6e2cb0bac9c1907df48033","hostname":"github.com","tags":["X Refsource MISC"],"sources":["cve.org","nvd"]},{"url":"https://github.com/LegacyUpdate/LegacyUpdate/commit/ae1c46c97f39a55a1937784d9f9beb30aa9147fd","label":"github.com/LegacyUpdate/LegacyUpdate/commit/ae1c46c97f39a55a1937784d9f9beb30aa9147fd","hostname":"github.com","tags":["X Refsource MISC"],"sources":["cve.org","nvd"]},{"url":"https://github.com/LegacyUpdate/LegacyUpdate/releases/tag/v1.13.2.0","label":"github.com/LegacyUpdate/LegacyUpdate/releases/tag/v1.13.2.0","hostname":"github.com","tags":["X Refsource MISC"],"sources":["cve.org","nvd"]},{"url":"https://legacyupdate.net/news/2026/07/21/legacy-update-1-13-2","label":"legacyupdate.net/news/2026/07/21/legacy-update-1-13-2","hostname":"legacyupdate.net","tags":["X Refsource MISC"],"sources":["cve.org","nvd"]}],"droppedReferenceCount":0,"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-13T21:08:05.334Z","label":"Published","detail":"Vulnerability first disclosed.","source":null}],"risk":{"score":70,"level":"high","profile":"default","profileName":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10},"appliedRules":["high-cvss-alone"]},"warnings":[],"meta":{"dataAsOf":"2026-10-14T23:32:18.829Z","stale":false,"partial":false}}