27447 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002777)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002777 advisory. In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by...
CVE-2026-20830
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20865
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20816
Time-of-check time-of-use toctou race condition in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-20867
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20949
Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-46685
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
Exploit for CVE-2026-20805
CVE-2026-20805 PoC Prueba de concepto para la vulnerabilidad...
EUVD-2025-206286
NSecsoft 'NSecKrnl' is a Windows driver that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes by issuing crafted IOCTL requests to the driver...
kernel: ipv6: Fix out-of-bounds access in ipv6_find_tlv()
An out of bounds OOB memory access flaw was found in the Linux kernel's ipv6 network subsystem. This could allow a local attacker to crash the system or leak kernel internal information...
CVE-2025-65397
An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001735)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001735 advisory. The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001709)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001709 advisory. Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the badflpintr function. By executi...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001687)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001687 advisory. A flaw was found in the Linux kernel in net/netfilter/nftablescore.c:nftdochain, which can cause a use-after-free. This issue needs to handle 'return' with proper...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001745)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001745 advisory. A flaw was found in the Linux kernels KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causi...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001468)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001468 advisory. A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with...
CVE-2025-15506
A flaw was found in AcademySoftwareFoundation OpenColorIO. A local attacker, by manipulating a specific function called ConvertToRegularExpression, can cause the software to read beyond its allocated memory boundaries. This issue, known as an out-of-bounds read, could lead to the application...
CVE-2022-50933
Cain & Abel 4.9.56 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with LocalSystem permissions...
CVE-2022-50931
TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3clientwin32.exe with custom files to potentially gain SYSTEM or Administrator-level access...