https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-45160.htmlhttps://patchthecve.com/cve/CVE-2023-45160.htmlWed, 17 Jun 2026 06:28:20 +0000HIGH 8.8: In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmful script. by replacing a resource script file created by an instruction at run time with a malicious script. The 1E Client's temporary directory is now locked dhttps://patchthecve.com/cve/CVE-2023-45159.htmlhttps://patchthecve.com/cve/CVE-2023-45159.htmlWed, 17 Jun 2026 06:28:20 +0000HIGH 8.4: 1E Client installer can perform arbitrary file deletion on protected files.   A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. A hotfix is available from the 1E supporhttps://patchthecve.com/cve/CVE-2023-3892.htmlhttps://patchthecve.com/cve/CVE-2023-3892.htmlWed, 17 Jun 2026 06:15:15 +0000MEDIUM 5.6: Improper Restriction of XML External Entity Reference vulnerability in MIM Assistant and Client DICOM RTst Loading modules allows XML Entity Linking / XML External Entities Blowup. In order to take advantage of this vulnerability, an attacker must craft a malicious XML document, embed this docu