34220 matches found
Oracle Solaris Resource Management Error Vulnerability
Oracle Solaris is a Unix-like operating system developed by Oracle. A file system component vulnerability exists in Oracle Solaris version 11 that stems from a flaw in the system privilege validation mechanism. An attacker could use this vulnerability to cause a complete denial of service sustain...
TencentOS Server 4: open-vm-tools (TSSA-2025:0776)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0776 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Privilege Escalation
PyInstaller is vulnerable to Privilege Escalation. The vulnerability is due to the bootstrap process appending a special entry to sys.path and attempting to load an optional bytecode-decryption module while that entry is present, which allows an attacker who can create files/directories next to t...
PT-2025-43002
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 through 7.2.2 Description A flaw exists in the Oracle VM VirtualBox product, specifically within the Core component. A highly privileged attacker with local access can compromise the VirtualBox environment...
PT-2025-43001
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 through 7.2.2 Description An issue exists in the Oracle VM VirtualBox product, specifically within the Core component. A high-privileged attacker with local access can compromise Oracle VM VirtualBox,...
RLSA-2025:17428 Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools: Local privilege escalation in open-vm-tools...
RockyLinux 9 : open-vm-tools (RLSA-2025:17428)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:17428 advisory. open-vm-tools: Local privilege escalation in open-vm-tools CVE-2025-41244 Tenable has extracted the preceding description block directly from the RockyLinux...
ASUS Armoury Crate Improper Link Following Vulnerability
ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a link following improper vulnerability that can be exploited by an attacker to cause a local elevation of privilege...
Fortinet FortiClient MacOS installer data forgery issue vulnerability
Fortinet FortiClient MacOS installer is a client installer from Fortinet. The Fortinet FortiClient MacOS installer suffers from a data forgery issue vulnerability that stems from improper cryptographic signature validation, which can be exploited by an attacker to cause elevation of privilege for...
CVE-2025-61955
A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support EoTS are not...
Exploit for CVE-2025-62376
CVE-2025-62376: Local Privilege Escalation Exploit for Sudo...
Alibaba Cloud Linux 3 : 0159: open-vm-tools (ALINUX3-SA-2025:0159)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0159 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-41244: VMware Aria Operations and VMware...
EUVD-2025-34695
The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be able to elevate their privileges...
CVE-2025-43281
CVE-2025-43281 affects macOS Sequoia 15.6. The issue is a local privilege escalation that was addressed by improved authentication. Appleās security content notes that the fix is in Sequoia 15.6, mitigating the elevation-of-privilege risk for affected components (listed under the macOS Sequoia se...
CVE-2025-58719
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2025-25004
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2025-58722
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-58714
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...