CVE-2026-108304

Tanium addressed a local privilege escalation vulnerability within the End-User Notifications component. The issue is associated with CWE-59 (Improper Link Resolution Before File Access) and CWE-282 (Improper Ownership Management). Impact includes high levels of confidentiality, integrity, and av...

CVE-2026-108304 Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-108305

Tanium addressed a local privilege escalation vulnerability within the End-User Notifications component. The underlying cause is identified as Improper Link Resolution Before File Access (Link Following) (CWE-59). This vulnerability allows an attacker with low privileges to gain higher privileges...

EUVD-2026-111242

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-108305 Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-105477

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

CVE-2026-92376

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

CVE-2026-92374

A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...

CVE-2026-105477

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

CVE-2026-105477

A vulnerability in Veeam Agent for Linux enables local privilege escalation . This issue specifically affects installations that are managed by a Veeam Backup & Replication instance. The root cause is associated with an Untrusted Search Path (CWE-426). No specific exploit information or remediati...

EUVD-2026-111125

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage

Summary The FileSessionManager defaults to storing session data in /tmp/strands/sessions/ a world-writable directory using predictable file paths and a write pattern openpath + ".tmp", "w" → os.replace that follows symbolic links. A local attacker can exploit this to overwrite arbitrary files or...

GHSA-3W55-933P-8PV5 Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage

Summary The FileSessionManager defaults to storing session data in /tmp/strands/sessions/ a world-writable directory using predictable file paths and a write pattern openpath + ".tmp", "w" → os.replace that follows symbolic links. A local attacker can exploit this to overwrite arbitrary files or...

CVE-2026-111583

The TeamViewer Full Client and Host for Windows prior to version 15.82 is vulnerable to Local Privilege Escalation (CWE-269) due to improper access control in the installer staging directory. During the installation of Advanced Asset Management , a local authenticated user with low privileges can...

CVE-2026-111583 Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

CVE-2026-111582 Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction...

CVE-2026-92376

TeamViewer Remote Management Monitoring for Windows versions prior to 26.10.1 are vulnerable to a local privilege escalation flaw due to improper authentication in the inter-process communication (IPC) mechanism. A local authenticated attacker with low privileges can impersonate the IPC broker , ...

EUVD-2026-111076

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

CVE-2026-92376 Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

CVE-2026-92375

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host (prior to version 15.83) and the Remote Management Monitoring component (prior to version 26.10.1) enables a local authenticated attacker with low privileges to execute scripts as SYSTEM/root ...