42350 matches found
Exploit for External Control of File Name or Path in Nomachine
CVE-2026-5054 Abusing a vulnerability on affected installatio...
kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for arm64 architectures. An issue in the reallocation of the nestedmmus array allows a process to access freed memory. This memory corruption vulnerability could enable a local attacker to escalate privileges or cause a denia...
CVE-2026-4556
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
CVE-2026-4556
The Exam4 application on macOS is vulnerable to a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper. The issue stems from the [ConsoleLogHelper copyConsoleIntoFileFromStartDate:] method, which fails to properly sanitize attacker-controlled parameters used in ...
EUVD-2026-88311
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
CVE-2026-4556 macOS Exam4 Local Privilege Escalation via Command Injection
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
CVE-2026-4556 macOS Exam4 Local Privilege Escalation via Command Injection
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
CVE-2026-98116
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sound subsystem. A race condition between concurrent memory mapping operations and audio buffer reallocations allows memory pages to be released while still mapped as writable. A local user can exploit this vulnerabilit...
Exploit for Improper Authentication in Openprinting Cups
CVE-2026-34990-POC Technical analysis and proof-of-concept res...
Exploit for Improper Authentication in Openprinting Cups
CVE-2026-34990-POC Technical analysis and proof-of-concept res...
Exploit for Improper Authentication in Openprinting Cups
CVE-2026-34990 — CUPS Local Privilege Escalation PoC A generi...
Exploit for Improper Authentication in Openprinting Cups
CVE-2026-34990 — CUPS Local unprivileged user → root, via...
CVE-2026-4556: Improper Neutralization of Special Elements used in an OS Command
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
Exploit for Improper Authentication in Openprinting Cups
CVE-2026-34990 CUPS 2.4.16 local privilege escalation via arb...
CVE-2026-23111-PoC
CVE-2026-23111 — Linux カーネル nftables UAF → LPE Linux カーネル nftables サブシステムにおける use-after-free である CVE-2026-23111 の動作するローカル権限昇格エクスプロイト。linux-6.12.69 x86-64 でテスト済み。 ターゲット要件 このエクスプロイトは、以下の設定でビルドされたターゲットカーネルを前提としています: オプション| 値| 理由 ---|---|--- CONFIGNFTABLES| y| 脆弱なサブシステム CONFIGUSERNS| y| nftables...
Exploit for Improper Authentication in Openprinting Cups
CVE-2026-34990 - CUPS Local Privesc Local privilege escalatio...
Exploit for Improper Authentication in Openprinting Cups
CVE-2026-34990: CUPS 2.4.16 local privilege escalation PoC A...
Exploit for Improper Authentication in Openprinting Cups
CVE-2026-34990 — CUPS local privilege escalation cups2root, d...
SUSE SLES16: lastlog2 / libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2026:23870-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23870-1 advisory. - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount progr...