CVE-2026-79222

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

CVE-2026-79992 Emacs: local shell command injection through the user field in emacs tramp

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

EUVD-2026-65616

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

CVE-2026-79992

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

CVE-2026-79992

CVE-2026-79992 affects Emacs TRAMP , where a local attacker can achieve arbitrary code execution by processing maliciously crafted filenames. The root cause is that TRAMP concatenates login arguments (derived from the user field) without proper sanitization before passing them to a local shell . ...

CVE-2026-47624

NVIDIA DGX Spark contains a CWE-693 (Protection Mechanism Bypass) vulnerability in its UEFI firmware. A privileged local user can exploit this flaw to bypass administrator password protection in the UEFI environment. The CVSS v3.1 score is 6.0 (MEDIUM) , reflecting a local attack vector, low comp...

CVE-2026-79655

A path traversal flaw in the sos clean utility (part of the sos package) allows a local attacker to perform arbitrary file creation or overwrite . The root cause is improper validation of symlink and hardlink targets during tar archive extraction. A specially crafted tar archive can cause files t...

EUVD-2026-65492

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-74676

A flaw was found in the Linux kernel. A missing permission check in the KDSKBMETA ioctl input/output control allows a local process to modify the keyboard meta mode on a non-controlling console without proper authorization. This could enable an attacker to make unauthorized changes to system...

CVE-2021-3560

CVE-2021-3560 - Polkit Lokale Privilegienausweitung ⚠️ Nur für Bildungszwecke und autorisierte Sicherheitsforschung Ursprüngliche Exploit-Autoren Vielen Dank an den ursprünglichen PoC-Autor @UNICORDev von @NicPWNs und @Dev-Yeoj Beschreibung Es wurde festgestellt, dass Polkit dazu gebracht werden...

CVE-2021-36808

CVE-2021-36808 एक स्थानीय हमलावर, रेस कंडीशन का उपयोग करके, एंड्रॉइड के लिए Sophos Secure Workspace संस्करण 9.7.3115 से पहले में ऐप पासवर्ड को बायपास कर सकता है। सलाहकारी: https://www.sophos.com/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypass विस्तृत विवरण:...

CVE-2026-72696 Grav CMS before 2.0.16 Symlink Following via createLockFile

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

Linux Distros Unpatched Vulnerability : CVE-2026-79655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By...

CVE-2023-44765_ConcreteCMS-Stored-XSS---Associations

ConcreteCMS XSS v2.2.18 Autor: Sergio Beschreibung: Eine Cross-Site-Scripting-Schwachstelle in ConcreteCMS v.9.2.1 ermöglicht es einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript im Plural Handle der Data Objects unter System & Settings auszuführen. Angriffsvektoren: Skriptin...

CVE-2026-74724

A flaw was found in the Linux kernel's IPVS IP Virtual Server component. A local attacker can exploit this vulnerability by manipulating packets processed by IPVS, specifically within the ipvsnaticmp function. This manipulation can lead to an out-of-bounds write due to improper handling of the IP...

CVE-2026-74723

A flaw was found in the Linux kernel. A local attacker could craft a btrfs image with a malformed LZO compressed file extent. This could lead to an out-of-bounds read during decompression, potentially causing a denial of service...

CVE-2026-74722

A flaw was found in the Linux kernel's btrfs filesystem. A local attacker could exploit a memory leak in the btrfsdoencodedwrite function. This occurs because an extent changeset is not properly freed before the function returns. Successful exploitation of this memory leak could lead to a denial ...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: net: openvswitch: reject oversized nested action attrs

A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a loc...