34244 matches found
kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...
PT-2026-40752
Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect app versions prior to 6.3.3-h11 Description Multiple local privilege escalation flaws exist in the application due to the use of an untrusted search path. This allows a local, low-privileged user to escalate...
IObit Uninstaller 代码问题漏洞
IObit Uninstaller is a Windows software tool designed for forced uninstallation by IObit Corporation. Version 9.5.0.15 of IObit Uninstaller has a code vulnerability. This vulnerability stems from an issue with unreferenced service paths within the IObitUnSvr service, which may allow local attacke...
AlmaLinux 8 : kernel-rt (ALSA-2026:16196)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:16196 advisory. kernel: Dirty Frag is a new universal Local Privilege Escalation LPE vulnerability in the Linux kernel CVE-2026-43284 Tenable has extracted the preceding...
Linux Distros Unpatched Vulnerability : CVE-2026-46300
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skbtrycoalesce can attach paged...
Palo Alto Networks GlobalProtect app 代码问题漏洞
The Palo Alto Networks GlobalProtect app is a network protection software developed by Palo Alto Networks. The GlobalProtect app has a code vulnerability that stems from multiple local privilege escalation issues. This vulnerability allows local users to elevate their privileges to Windows’ NT...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...
kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
EUVD-2026-29717
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
EUVD-2026-29680
External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
EUVD-2026-29669
Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally...
EUVD-2026-29663
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally...
EUVD-2026-29668
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
EUVD-2026-29676
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
EUVD-2026-29661
Stack-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
EUVD-2026-29658
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...