EUVD-2026-111074

A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...

Exploit for CVE-2026-114148

CVE-2026-114148 - .NET Linux Tarball Local Privilege Escalatio...

Royal Server — Authenticated Local Privilege Escalation to LocalSystem — Detect

Fingerprint / reachability check for Royal Server — Authenticated Local Privilege Escalation to LocalSystem !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Royal Server — Authenticated Local Privilege Escalation to LocalSystem""" from kittysploit import from lib.protocols.http.httpclie...

mitv4-utgard-lpe

MiTV4 Amlogic Utgard — local privilege escalation via unvali...

Exploit for CVE-2026-98260

CVE-2026-98260 · Xiaomi 17 Pro pandora Local Privilege Escal...

polkit pkexec Privilege Escalation Mitigation

polkit pkexec versions prior to vendor fixes contain a local privilege escalation vulnerability. This Ansible role upgrades polkit where possible and otherwise removes the pkexec setuid bit...

PT-2026-126652

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

PT-2026-127156

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

PT-2026-126624

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

PT-2026-126622

A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...

TencentOS Server 3: mrtg (TSSA-2026:1202)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1202 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

PT-2026-127154

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

PT-2026-127155

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-65327

A logic issue in macOS allows a local attacker to potentially elevate their privileges . The vulnerability was addressed by implementing improved checks. This issue is resolved in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No specific exploit details or in-the-wild e...

EUVD-2026-110444

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer

A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...

CVE-2026-116596

Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract...

Exploit for CVE-2026-98260

CVE-2026-98260 — posix-cpu-timers UAF after a failed exec Eng...

CVE-2026-116596 CVE-2026-116596

Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract...