CVE-2026-97381

Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the permitted list falls through without setting E_ACCESSDENIED, causing IsPermitted to return S_OK. An attacker who induces a user to visit a malicious webpage in Internet Explorer can invoke the control to enumerate update and system information, install updates without consent, display dialogs, or restart the computer when a reboot is pending. This issue was fixed in Legacy Update 1.13.2.

• CWE-346
• CWE-393

• https://github.com/LegacyUpdate/LegacyUpdate/commit/7d62f0bfaa770d74cd6e2cb0bac9c1907df48033
• https://github.com/LegacyUpdate/LegacyUpdate/commit/ae1c46c97f39a55a1937784d9f9beb30aa9147fd
• https://github.com/LegacyUpdate/LegacyUpdate/releases/tag/v1.13.2.0
• https://github.com/LegacyUpdate/LegacyUpdate/security/advisories/GHSA-f4g7-4gmx-jfgf
• https://legacyupdate.net/news/2026/07/21/legacy-update-1-13-2

Published

Oct 13, 2026

Last Modified

Oct 17, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-97366A security flaw has been discovered in jhen0409 react-native…6.3
• CVE-2026-97368A weakness has been identified in chillzhuang SpringBlade up…6.3
• CVE-2026-9737During query planning when reading the sort pattern in raw B…6.5
• CVE-2026-97370Junrar is an open source Java RAR archive library. Prior to …7.5
• CVE-2026-9738The Print, PDF, Email by PrintFriendly plugin for WordPress …4.4
• CVE-2026-97380MariaDB server is a community developed fork of MySQL server…8.8
• CVE-2026-97387Rejected reason: This CVE is a duplicate of another CVE.
• CVE-2026-9739Vulnerable to DNS rebinding attacks when using SSE (http://b…9.4
• CVE-2026-97394kin-openapi is a Go project for handling OpenAPI files. From…7.5
• CVE-2026-97395Apache Polaris allows an authenticated principal with permis…8.1
• CVE-2026-97396The Email Marketing for WordPress and WooCommerce – Retainfu…6.4
• CVE-2026-97398The FV Flowplayer Video Player plugin for WordPress is vulne…7.2