Microsoft Authenticator Elevation of Privilege Vulnerability

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...

Windows Installer Elevation of Privilege Vulnerability

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

Windows Management Instrumentation Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

Windows Failover Cluster Elevation of Privilege Vulnerability

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...

cve-2025-32463

CVE-2025-32463-sudo-chwoot CVE-2025-32463 - Sudo chroot 权限提升漏洞的 PoC 原始 PoC sudo-chwoot.sh CTF 演示 chwoot-demo.c 文档 技术分析：https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot 安全公告：https://www.sudo.ws/security/advisories/chrootbug/ 其他 PoC ⚠️ 警告 ：这些 PoC 尚未经过验证。风险自负 Docker 化版本...

CVE-Writeups

CVE-Writeups 安全漏洞研究报告。CVE-2026-50402: Windows NTFS 权限提升 CVSS 7.8...

CVE-2025-27519

Below 权限提升漏洞利用 CVE-2025-27519 本仓库包含一个概念验证 PoC Bash 脚本，用于利用 Linux 系统上的 Below 权限提升漏洞 CVE-2025-27519。该漏洞利用允许本地用户通过滥用 below 二进制程序记录错误的方式，将权限提升至 root 。 ⚠️ 警告： 本脚本仅供 教育和授权渗透测试 使用。请勿 在您不拥有或未经许可测试的系统上使用。 漏洞概述 CVE： CVE-2025-27519 受影响软件： below 日志工具 影响： 本地权限提升 描述： below 二进制程序错误地处理错误日志和文件锁。其日志目录...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20512

CVE-2026-20512 is a local privilege escalation vulnerability in MediaTek's Audio HAL component, caused by improper input validation . An attacker who already holds the System privilege can escalate further without user interaction, potentially gaining full control over confidentiality, integrity,...

EUVD-2026-72201

In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012...

cve-2024-32019-PoC

CVE-2024-32019 — Netdata ndsudo 本地权限提升 摘要 Netdata 的 ndsudo 辅助程序（安装时为 setuid root）限制它可以运行的命令，但使用调用者的PATH 来解析这些命令。在受影响版本中，本地用户可以将恶意二进制文件放在 PATH 中更靠前的位置，并让 ndsudo 以 root 权限执行它。已在 Netdata 1.45.3 和 1.45.0-169 中修补。 受影响 / 已修补 受影响： = 1.44.0-60, = 1.45.0, 来打印解析后的命令而不实际执行 （请谨慎使用，先阅读代码）。GitHub ⚠️ 不包含武器化 PoC...

COPY-FAIL-CVE-2026-31431

This is a public Proof-of-Concept PoC for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation vulnerability CVSS 7.8 affecting most major distributions since 2017. It corrupts the page cache of a setuid binary like /usr/bin/su using the kernel's AFALG crypto API + splice, allowi...

PUB-A-510832289

In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-513140167

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-511553754

In enablesegment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-508718229

In Bootloader, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Astra Linux – Vulnerability in Linux

In various methods of kernel-based drivers, there is a possibility of an out-of-bounds write due to a heap buffer overflow. This could lead to a local escalation of privileges, requiring system execution privileges. User interaction is not required for exploitation. Product: Android Versions:...

Astra Linux – Vulnerability in Linux 5.10

A double-free bug in the packetsetring function in net/packet/afpacket.c can be exploited by a local user through crafted syscalls to escalate privileges or deny services. We recommend upgrading the kernel to a version that is not affected by this bug, or rebuilding the code after the...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

A use-after-free vulnerability exists in the netfilter component of the Linux kernel’s nftables module, which can be exploited to achieve local privilege escalation. The nftsetelemcatchalldeactivate function checks whether the catch-all set element is active in the current generation rather than...