Lucene search
+L

502 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•3 views

CVE-2026-21223: Improper Privilege Management

Improper privilege management in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...

7.1CVSS7.6AI score0.00272EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•17 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001016)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001016 advisory. arch/mips/include/asm/threadinfo.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure TIFSECCOMP checks on the fast system-call path, which...

4.6CVSS6.4AI score0.00511EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001126 advisory. net/netfilter/xtosf.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for addcallback and removecallback operations, which allows loca...

7.8CVSS6.5AI score0.00406EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•10 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001837 advisory. The aaccompatioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAPSYSRAWIO capability, which allows local users t...

6.9CVSS6.6AI score0.00494EPSS
SaveExploits0References23
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•8 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002082 advisory. fs/namespace.c in the Linux kernel before 4.0.2 processes MNTDETACH umount2 system calls without verifying that the MNTLOCKED flag is unset, which allows local users...

6.1CVSS6.8AI score0.00331EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•12 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002281 advisory. The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass...

7.2CVSS6.6AI score0.22204EPSS
SaveExploits13References26
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•9 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003302 advisory. net/netfilter/xtosf.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for addcallback and removecallback operations, which allows loca...

7.8CVSS6.5AI score0.00406EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•10 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003419 advisory. net/netfilter/xtosf.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for addcallback and removecallback operations, which allows loca...

7.8CVSS6.5AI score0.00406EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•8 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003428 advisory. net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations, which allows local...

7.8CVSS6.7AI score0.00372EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•8 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003038)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003038 advisory. nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, an...

5.5CVSS6.6AI score0.00364EPSS
SaveExploits0References14
RedhatCVE
RedhatCVE
•added 2026/01/14 6:22 p.m.•19 views

CVE-2026-20824

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

5.5CVSS6.1AI score0.00856EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•12 views

MiracleLinux 4 : sudo-1.7.4p5-12.AXS4 (AXSA:2012-755:02)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-755:02 advisory. Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all...

7.2CVSS7.3AI score0.00399EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•13 views

MiracleLinux 3 : sudo-1.7.2p1-14.AXS3 (AXSA:2012-690:02)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-690:02 advisory. Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all...

7.2CVSS7.3AI score0.00399EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/13 6:16 p.m.•7 views

CVE-2026-20949

Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...

7.8CVSS5.7AI score0.00462EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/13 6:16 p.m.•13 views

CVE-2026-20949

Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...

7.8CVSS0.00462EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/13 6:16 p.m.•18 views

CVE-2026-20824

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

5.5CVSS6AI score0.00856EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/13 6:16 p.m.•14 views

CVE-2026-20824

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

5.5CVSS0.00856EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/13 5:56 p.m.•13 views

CVE-2026-20824

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

5.5CVSS6AI score0.00856EPSS
SaveExploits0References2Affected Software20
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•25 views

PT-2026-2674

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A security feature bypass exists in Windows Remote Assistance. This allows an unauthorized attacker to bypass a security feature locally. The issue involves a failure in a protection mechanis...

5.5CVSS5.8AI score0.00856EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•12 views

PT-2026-2749

CVE-2026-20949 Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally. https://t.co/ASZWOprilb...

7.8CVSS6.7AI score0.00462EPSS
SaveExploits0References3
Rows per page
Query Builder