42350 matches found
ASB-A-508389591
In nfcmainhaldatacback of nfcmain.cc, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-522376740
In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CentOS Linux 7 [TuxCare] Security Update: libgudev1 / libgudev1-devel / systemd / systemd-devel / etc (CENTOS7:CLSA-2023:1698690423)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2023:1698690423 advisory. - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which th...
Important: Red Hat Security Advisory: rsync security, bug fix, and enhancement update
An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
rsync: rsync: Local Privilege Escalation via Symlink Following
A symlink-following vulnerability in rsync allows local attackers to redirect predictable output paths to arbitrary filesystem locations. When rsync runs with elevated privileges such as setuid or a privileged daemon, this enables arbitrary file overwrites and local privilege escalation...
CVE-2026-102118
A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...
CVE-2026-102113
A privilege escalation vulnerability exists in Kiteworks where an attacker with local code execution as an unprivileged backend service account on the appliance can escalate to root privileges. The root cause is a privileged routine that fails to safely handle a filesystem path influenced by the ...
CVE-2026-102118
A local privilege escalation vulnerability exists in Kiteworks Core versions prior to 9.5.0 . An attacker who already possesses a shell under a low-privileged service account can exploit this flaw to escalate their privileges to root on the appliance. The documents do not provide specific technic...
CVE-2026-102118 Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation
A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...
CVE-2026-102118 Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation
A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...
EUVD-2026-90301
A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...
CVE-2026-53605
Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly broad sudoers entry granting the pollen daemon user uid 1000...
gvfs: gvfs-admin socket ownership race permits local root
A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown function on a pathname inside a user-controlled directory. A local attacker can exploit this via a Time-of-Check...
CVE-2026-102490
Zammad packages built with packager.io DEB and RPM could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owne...
CVE-2026-53605 Reachy Mini Wireless: Local Privilege Escalation via Unrestricted sudo systemctl Grant
Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly broad sudoers entry granting the pollen daemon user uid 1000...
CVE-2026-53605 Reachy Mini Wireless: Local Privilege Escalation via Unrestricted sudo systemctl Grant
Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly broad sudoers entry granting the pollen daemon user uid 1000...
CVE-2026-53605 Reachy Mini Wireless: Local Privilege Escalation via Unrestricted sudo systemctl Grant
Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly broad sudoers entry granting the pollen daemon user uid 1000...
CVE-2026-53605
The Reachy Mini ISO for Wireless (used to build custom Raspberry Pi OS images for the Reachy Mini Wireless robot) is vulnerable to Local Privilege Escalation (LPE) prior to version 0.2.4 . The root cause is an overly broad sudoers entry that grants the pollen daemon user (uid 1000) passwordless s...
EUVD-2026-90198
Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly broad sudoers entry granting the pollen daemon user uid 1000...