5238 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001105)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001105 advisory. A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function getnetnsbyid in net/core/netnamespace.c...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004118)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004118 advisory. In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004452)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004452 advisory. In doiptgetctl and doiptsetctl of iptables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004083)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004083 advisory. In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System...
CVE-2021-47799
Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access. Attackers can exploit the unsafe Sudo settings by using mount commands to bind a shell, enabling unauthorized system-level privileges...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002913)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002913 advisory. Use-after-free vulnerability in the diskseqfstop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002508)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002508 advisory. The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privilege...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001990)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001990 advisory. The vccrecvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002196)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002196 advisory. Integer overflow in lib/asn1decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data. Tenable has extracted the precedin...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003060)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003060 advisory. The doshmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local use...
CVE-2026-20831
Time-of-check time-of-use toctou race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001672)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001672 advisory. A time-of-check to time-of-use issue exists in iouring subsystem's IORINGOPCLOSE operation in the Linux kernel's versions 5.6 - 5.11 inclusive, which allows a local...
CVE-2026-21221
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-21221
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20940
CVE-2026-20940 is a heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver that enables a locally authenticated attacker to elevate privileges. Connected advisories confirm the affected component (Cloud Files Mini Filter Driver) and the privilege-escalation impact; Microsoft has...
CVE-2026-20809
CVE-2026-20809 is a Windows Kernel Memory TOCTOU race condition that enables local privilege escalation. Public docs confirm the vulnerability and classify impact as obtaining elevated privileges. Remediation linked to January 2026 updates (e.g., KB5073457/KB5073379 families) addressing Windows K...
Windows Management Services Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...