34257 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: multipath-tools (UTSA-2025-680597)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680597 advisory. multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414490)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414490 advisory. A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414459)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414459 advisory. The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system...
RHEL 10 : open-vm-tools (RHSA-2025:17429)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:17429 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414579)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414579 advisory. A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: microcode_ctl (UTSA-2025-986087)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986087 advisory. Improper input validation in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...
Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools: Local privilege escalation in open-vm-tools...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: udisks2 (UTSA-2025-984808)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984808 advisory. A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the allowactive setting in Polkit permits a physically present user to take certa...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414296)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414296 advisory. An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414548)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414548 advisory. In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libblockdev (UTSA-2025-177310)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-177310 advisory. A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the allowactive setting in Polkit permits a physically present user to take certa...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414493)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414493 advisory. A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: udisks2 (UTSA-2025-587571)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-587571 advisory. A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the allowactive setting in Polkit permits a physically present user to take certa...
ALSA-2025:17509 Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools: Local privilege escalation in open-vm-tools...
CVE-2025-36356
CVE-2025-36356 affects IBM Security Verify Access and IBM Security Verify Access Docker (versions 10.0.0.0–10.0.9.0 and 11.0.0.0–11.0.1.0). The vulnerability arises from execution with more privileges than required, allowing a locally authenticated user to escalate to root. Public exploitation de...
Trend Micro Antivirus for Mac vulnerable to Local Privilege Escalation
Overview Trend Micro Incorporated has released a security update for Trend Micro Antivirus for Mac. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact An unprivileged user may gain root access by exploiting a leftover file after...
Exploit for CVE-2025-41244
CVE-2025-41244 PoC VMware Aria Operations &1" VERSIONEND do...
📄 GNU Screen 4.5.0 Local Privilege Escalation
GNU Screen version 4.5.0 local privilege escalation exploit that leverages shared library loading. GNU Screen 4.5.0 Local Privilege Escalation Exploit CVE-2017-5618 📌 Overview Local privilege escalation exploit for GNU Screen 4.5.0 that hijacks shared library loading to gain root access via...
RockyLinux 10 : yggdrasil (RLSA-2025:7592)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:7592 advisory. yggdrasil: Local privilege escalation in yggdrasil CVE-2025-3931 Tenable has extracted the preceding description block directly from the RockyLinux...