34981 matches found
CVE-2019-16784
In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in "onefile" mode is launched by a privileged user at least more than the current one which have his "TempPath" resolving to a world...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000351)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000351 advisory. An issue was found in Linux kernel before 5.5.4. The mwifiexcmdappendvsietlv function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000366)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000366 advisory. A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events t...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000382)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000382 advisory. In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with ...
EulerOS 2.0 SP9 : pam (EulerOS-SA-2026-1010)
According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows a...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000425)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000425 advisory. In binderreleasework of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000294)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000294 advisory. In binderthreadread of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : usbmuxd (SUSE-SU-2026:0042-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0042-1 advisory. - CVE-2025-66004: Fixed LPE from nobody to usbmux bsc1254302 Tenable has extracted the preceding...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000291)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000291 advisory. In binderfreetransaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000395)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000395 advisory. In cdevget of chardev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privilege...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000308)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000308 advisory. In skbtomamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additiona...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000488)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000488 advisory. In calcvmmayflags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by...
EulerOS 2.0 SP9 : pam (EulerOS-SA-2026-1016)
According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows a...
CVE-2025-14979
AirVPN Eddie on MacOS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects Eddie: 2.24.6...
CVE-2025-46696
Dell Secure Connect Gateway SCG 5.0 Appliance and Application, versions versions 5.26 to 5.30, contains an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-14979 Eddie VPN 2.24.6 - Local Privilege Escalation
AirVPN Eddie on MacOS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects Eddie: 2.24.6...
CVE-2025-46696
Dell Secure Connect Gateway SCG 5.0 Appliance and Application, versions versions 5.26 to 5.30, contains an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 A local privilege escalation vulnerability was fou...
Security update for usbmuxd
This update for usbmuxd fixes the following issues: CVE-2025-66004: Fixed LPE from nobody to usbmux bsc1254302 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for...