34767 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002163)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002163 advisory. The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service system crash via a VAPIC synchronization...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002384)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002384 advisory. Race condition in the smbsendrqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service NULL pointer...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002506)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002506 advisory. In blkmqtagtorq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003081)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003081 advisory. The replacemapfdwithmapptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local use...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002517)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002517 advisory. mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service page tainting via a...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002805)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002805 advisory. The bnepaddconnection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local use...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002836)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002836 advisory. The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash via...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003036)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003036 advisory. In ashmemioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege enabli...
CVE-2023-54338
Tftpd32 SE 4.60 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be run with system-level...
CVE-2022-50915
PTPublisher 2.3.4 contains an unquoted service path vulnerability in the PTProtect service that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in 'C:\Program Files x86\Primera...
CVE-2022-50927
Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricte...
CVE-2022-50917
ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...
CVE-2025-37186
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges...
CVE-2026-21224
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-20920
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20870
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20809
Time-of-check time-of-use toctou race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...
CVE-2026-20874
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...