Lucene search
+L

3388 matches found

GithubExploit
GithubExploit
added 2026/05/16 8:53 p.m.189 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

🔴 CVE-2026-31431 — Copy Fail : Répertoire de Prévention É...

7.8CVSS7.4AI score0.99907EPSS
SaveExploits239
GithubExploit
GithubExploit
added 2026/05/16 4:12 p.m.145 views

Exploit for Write-what-where Condition in Linux Linux_Kernel

CVE-2026-43284 xfrm/ESP page cache write exploit, 4 byte primit...

8.8CVSS6AI score0.93235EPSS
SaveExploits32
GithubExploit
GithubExploit
added 2026/05/16 4:02 p.m.219 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 - Linux Kernel AFALG "Copy Fail" Local Privile...

7.8CVSS7.3AI score0.99907EPSS
SaveExploits239
OSV
OSV
added 2026/05/15 10:06 p.m.11 views

SUSE-SU-2026:1876-1 Security update for openssh

This update for openssh fixes the following issues - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid bsc1261427. - CVE-2026-35414: mishandling of authorizedkeys principals option bsc1261430...

8.1CVSS6AI score0.00612EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/05/15 9:24 p.m.213 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

copyfail — CVE-2026-31431 4-byte page-cache write primitive →...

7.8CVSS7.3AI score0.99907EPSS
SaveExploits239
OSV
OSV
added 2026/05/15 11:23 a.m.8 views

OPENSUSE-SU-2026:20757-1 Security update for openssh

This update for openssh fixes the following issues Security issues fixed: - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid bsc1261427. - CVE-2026-35414: mishandling of authorizedkeys principals option bsc1261430. Other issues fixed: - SSH port not reachable on...

8.1CVSS5.8AI score0.00612EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/05/15 6:11 a.m.23 views

EUVD-2026-30510

VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...

7.8CVSS5.8AI score0.00122EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/15 6:11 a.m.12 views

CVE-2026-41702

VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...

7.8CVSS5.8AI score0.00122EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/05/15 6:11 a.m.72 views

CVE-2026-41702 TOCTOU local privilege escalation vulnerability

VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is install...

7.8CVSS0.00122EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.21 views

VMware Fusion 安全漏洞

VMware Fusion is a virtual machine software developed by VMware Corporation in the United States, designed specifically for running Windows applications on Apple machines. VMware Fusion has a security vulnerability, which stems from an TOCTOU issue during the execution of SETUID binary files. Thi...

7.8CVSS6.1AI score0.00122EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/05/13 8:55 a.m.209 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

copyfail-sh No race. No offsets. No prebuilt binary to blin...

7.8CVSS7.2AI score0.99907EPSS
SaveExploits239
OSV
OSV
added 2026/05/12 10:11 a.m.17 views

SUSE-SU-2026:21634-1 Security update for openssh

This update for openssh fixes the following issues - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid bsc1261427. - CVE-2026-35414: mishandling of authorizedkeys principals option bsc1261430...

8.1CVSS6AI score0.00612EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/09 4:16 a.m.52 views

CVE-2026-41163

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. This allows the attacker to arbitraril...

8.7CVSS0.00274EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/05/09 4:16 a.m.19 views

CVE-2026-41163

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. This allows the attacker to arbitraril...

8.7CVSS5.8AI score0.00274EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/09 4:16 a.m.26 views

UBUNTU-CVE-2026-41163

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. This allows the attacker to arbitraril...

8.7CVSS5.7AI score0.00274EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/09 3:56 a.m.11 views

CVE-2026-41163 bubblewrap vulnerable to privilege escalation in setuid mode via ptrace

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. This allows the attacker to arbitraril...

8.7CVSS5.9AI score
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/05/09 3:56 a.m.12 views

CVE-2026-41163

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. This allows the attacker to arbitraril...

8.7CVSS5.7AI score0.00274EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/09 3:56 a.m.10 views

CVE-2026-41163 bubblewrap vulnerable to privilege escalation in setuid mode via ptrace

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. This allows the attacker to arbitraril...

8.7CVSS5.7AI score0.00274EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/05/09 3:56 a.m.85 views

CVE-2026-41163

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. This allows the attacker to arbitraril...

8.7CVSS5.7AI score0.00274EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/05/09 3:56 a.m.73 views

CVE-2026-41163 bubblewrap vulnerable to privilege escalation in setuid mode via ptrace

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. This allows the attacker to arbitraril...

8.7CVSS0.00274EPSS
SaveExploits0References2
Rows per page
Query Builder