43655 matches found
CVE-2026-78892
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. Chromium security severity: Medium...
CVE-2022-50999
creationtimestamp| type| source ---|---|--- 2026-08-25 18:56:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwioadzaj2v 2026-09-02 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujlhzuqxc2l...
CVE-2021-47996
creationtimestamp| type| source ---|---|--- 2026-08-25 18:52:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwii2nyif2w 2026-09-02 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujx7k3bo523...
Exploit for Use After Free in Microsoft
CVE-2026-68820 — Mass Exploit Framework Edition. Automated modu...
AZL-98211 CVE-2026-79655 affecting package sos 4.6.1-2
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...
Exploit for Use After Free in Linux Linux_Kernel
pixel-ksu-root An adb-driven tool that turns a stock, locked-...
FreeBSD-SA-26:63.posixshm
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:63.posixshm Security Advisory The FreeBSD Project Topic: TOCTOU race in POSIX shared memory large page configuration Category: core Module: posixshm...
PT-2026-81387
NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi...
PT-2026-81929
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A use-after-free issue exists in the implementation of an ioctl, which occurs when the system attempts to acquire locks on all channels in a sync group. If locki...
AlmaLinux 9 : mrtg (ALSA-2026:57600)
The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:57600 advisory. mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation CVE-2026-72694 Tenable has extracted the preceding...
AlmaLinux 8 : NetworkManager (ALSA-2026:58555)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58555 advisory. NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend CVE-2026-10805 Tenable has extracted the preceding descripti...
EulerOS Virtualization 2.13.1 : haveged (EulerOS-SA-2026-3174)
According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...
FreeBSD -- Use-after-free in unix SOCK_STREAM message handling
Problem Description: The SOCKSTREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing them. Some error paths would free those messages, leaving freed data mbufs in the receive socket buffer. Impact: An unprivileged loca...
CVE-2026-63404: Insecure Temporary File
Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vulnerable to an insecure temporary file flaw that lets a local unprivileged user hijack the Redis configuration and escalate to root. It writes its startup configuration to a...
PT-2026-81883
Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vulnerable to an insecure temporary file flaw that lets a local unprivileged user hijack the Redis configuration and escalate to root. It writes its startup configuration to a...
EulerOS Virtualization 2.13.0 : haveged (EulerOS-SA-2026-3214)
According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...
CVE-2026-78553
RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...
kernel: rtmutex: Use waiter::task instead of current in remove_waiter()
A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...
kernel: rtmutex: Use waiter::task instead of current in remove_waiter()
A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...
kernel: net: openvswitch: reject oversized nested action attrs
A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a loc...