20780 matches found
EUVD-2026-92193
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195...
EUVD-2026-92194
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217...
EUVD-2026-92197
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607...
EUVD-2026-92198
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608...
CVE-2026-20521
A missing bounds check in the Video HAL component can lead to a local escalation of privilege . This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch ID: ALPS11375674 and ...
kernel: net: qrtr: restrict socket creation to the initial network namespace
A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...
kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
A flaw was found in the Linux kernel's memory management subsystem. This issue occurs when the kernel's memory allocator attempts to zero out newly allocated memory, but an incorrect check prevents the full memory region from being cleared under specific configurations. This can lead to memory no...
CVE-2026-78860
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
CVE-2026-78860
The Mercusys AC12 V2 is affected by a vulnerability that allows a local attacker to achieve arbitrary code execution . The root cause is identified as the storage of information in plaintext , which is associated with CWE-311 (Missing Encryption of Sensitive Data) and CWE-347 (Improper Verificati...
CVE-2026-78861
The Mercusys AC12 V2 is vulnerable to a flaw where a local attacker can execute arbitrary code . This vulnerability is caused by the inclusion of a hardcoded 512-bit RSA Private Key within the device. While the CVSS 3.1 score is 7.7 (High) , indicating high impact on confidentiality and integrity...
Fedora 45 : cri-o1.36 (2026-77abfa2cdd)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-77abfa2cdd advisory. - Update to release v1.36.6 - Resolves: rhbz2537559 - Resolves CVE-2026-17113: rhbz2523493 - Resolves: rhbz2540885 Tenable has extracted the preceding...
EUVD-2026-92785
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...
CVE-2026-78862
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...
CVE-2026-78860
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
EUVD-2026-92786
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
CVE-2022-37705
제안된 설명 Amanda 3.5.1에서 백업 사용자를 루트 권한으로 승격시킬 수 있는 권한 상승 결함이 발견되었습니다. 취약한 구성 요소는 runtar SUID로, 공격자가 제어할 수 있는 특정 인수로 /usr/bin/tar를 실행하는 래퍼일 뿐입니다. 이 프로그램은 tar 바이너리에 전달된 인수를 올바르게 검사하지 않습니다 모든 인수가 --ARG VALUE 형식일 것이라고 가정하지만 --ARG=VALUE를 하나의 인수로 제공할 수 있습니다. 추가 정보 이 결함은 코드 실행, 서비스 거부, 권한 상승 및 정보 공개에 악용될 수...
cve_2024_0044
CVE 2024 0044 CVE-2024-0044는 PackageInstallerService.java 파일의 createSessionInternal 함수에서 발견된 높은 심각도의 취약점으로, Android 12 및 13에 영향을 미칩니다. 이 취약점은 공격자가 'run-as any app' 공격을 수행할 수 있게 하여 사용자 상호작용 없이 로컬 권한 상승을 초래합니다. 문제는 createSessionInternal 함수 내의 부적절한 입력 검증으로 인해 발생합니다. 공격자는 세션 생성 프로세스를 조작하여 이 취약점을 악용할 ...
CVE-2025-70342
CVE-2025-70342：通过 erase-install 中的命名管道截获凭据 概述 早于 v40.4（提交 2c31239）的 erase-install 会将 swiftDialog 的凭据输出写入硬编码路径 /var/tmp/dialog.json。在 Apple Silicon Mac 上，重新安装/擦除操作期间输入的管理员凭据会写入这个可预测且全局可写的位置。本地非特权攻击者可以在此路径创建命名管道（FIFO），实时截获管理员凭据。 受影响版本 存在漏洞： erase-install /dev/null "$dialogoutput" 在 Apple Silicon Ma...
CVE-2023-1326-PoC
CVE-2023-1326-PoC apport-cli 2.26.0 における CVE-2023–1326 の概念実証（Proof of Concept） この脆弱性は、apport-cli 2.26.0 における権限昇格であり、CVE-2023–26604 と類似しています。この脆弱性は、sudoers で設定されている場合にのみ機能します。 権限昇格攻撃が apport-cli 2.26.0 およびそれ以前のバージョンで発見されました。これは CVE-2023-26604 と類似しています。システムが特別に構成され、非特権ユーザーが sudo apport-cli...
