CVE-2026-0294

The CVE-2026-0294 entry concerns a local privilege-escalation in the Palo Alto Networks Prisma Access Agent app affecting Windows and macOS. The vulnerability allows a local user to run code with elevated privileges, enabling higher-privilege control on those platforms. The Prisma Access Agent is...

CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS,...

PT-2026-71645

During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges...

CVE-2026-0294: Uncontrolled Search Path Element

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected...

EUVD-2026-57439

A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a cluster-scoped ClusterRoleBinding. This allows the user to escalate their privileges from namespace-local access to...

CVE-2026-73269

A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a cluster-scoped ClusterRoleBinding. This allows the user to escalate their privileges from namespace-local access to...

Prisma Access Agent: Local Privilege Escalation

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected. Work around: No known workarounds...

EUVD-2026-57259

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories

A time-of-check time-of-use TOCTOU race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package...

CVE-2026-66148

An authenticated command injection vulnerability was identified in GMS Command-Line Interface CLI 9.5.1 Build 9510.1044 and earlier versions which allows low-privileged local user to execute system commands with root privileges...

CVE-2026-66148

An authenticated command injection vulnerability was identified in GMS Command-Line Interface CLI 9.5.1 Build 9510.1044 and earlier versions which allows low-privileged local user to execute system commands with root privileges...

CVE-2026-66148

An authenticated command injection vulnerability exists in the GMS Command-Line Interface (CLI) version 9.5.1 (Build 9510.1044) and earlier versions. The root cause is the lack of proper validation of a user-supplied string before it is used to execute a system call within the Virtual Appliance i...

EUVD-2026-56942

An authenticated command injection vulnerability was identified in GMS Command-Line Interface CLI 9.5.1 Build 9510.1044 and earlier versions which allows low-privileged local user to execute system commands with root privileges...

CVE-2025-0046

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution...

CVE-2025-0046

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution...

EUVD-2025-210696

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution...

CVE-2025-0046

Technical details about CVE-2025-0046 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories to identify affected products, exact root cause, impact, and available mitigations.

CVE-2025-0046

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution...

CVE-2026-68378

A flaw was found in the Linux kernel's dpll subsystem. A local user could trigger a null pointer dereference in the dpllmsgaddpinrefsync function when a dpllpin is shared across multiple dplldevice instances and those devices are being unregistered. This vulnerability can lead to a system crash,...

CVE-2026-68167

A flaw was found in the Linux kernel's btrfs filesystem. A local user could trigger a kernel panic by performing specific filesystem operations that involve data relocation. This occurs because the system attempts to compress and inline data for relocation inodes, which are not designed for such...