33980 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002675)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002675 advisory. kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002411)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002411 advisory. The aiomount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intende...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002875)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002875 advisory. Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003457)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003457 advisory. Use-after-free vulnerability in the diskseqfstop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002794)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002794 advisory. The xfrmreplayverifylen function in net/xfrm/xfrmuser.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRMMSGNEWAE update, which...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002460)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002460 advisory. The nttywrite function in drivers/tty/ntty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the LECHO & !OPOST case, which allows...
CVE-2023-54338
Tftpd32 SE 4.60 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be run with system-level...
CVE-2022-50915
PTPublisher 2.3.4 contains an unquoted service path vulnerability in the PTProtect service that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in 'C:\Program Files x86\Primera...
CVE-2022-50927
Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricte...
CVE-2022-50917
ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...
CVE-2025-37186
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges...
CVE-2026-21224
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-20920
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20870
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20874
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20809
Time-of-check time-of-use toctou race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...
CVE-2026-20836
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-20924
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...