Lucene search
+L

4590 matches found

osv_cve
osv_cve
•added 2026/04/10 3:14 p.m.•30 views

CVE-2026-40224

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace...

6.7CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/10 3:14 p.m.•18 views

CVE-2026-40224

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace...

6.7CVSS6AI score0.00106EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/10 3:14 p.m.•58 views

CVE-2026-40224

CVE-2026-40224 concerns a local privilege escalation in systemd-machined: in systemd 259 before 260, varlink can be used to reach the root namespace, enabling elevation of privileges. The vulnerability affects the systemd component and is tied to root namespace handling via varlink. The provided ...

7.3CVSS6AI score0.00106EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2026/04/10 3:14 p.m.•50 views

CVE-2026-40224

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace...

6.7CVSS0.00106EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2026/04/10 3:14 p.m.•23 views

CVE-2026-40224

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace...

7.3CVSS6AI score0.00106EPSS
SaveExploits1
osv_cve
osv_cve
•added 2026/04/10 3:10 p.m.•17 views

CVE-2026-40223

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

4.7CVSS5.9AI score
SaveExploits0References3
CVE
CVE
•added 2026/04/10 3:10 p.m.•37 views

CVE-2026-40223

Affected software: systemd, versions 258 prior to 260. Vulnerability: local unprivileged user can trigger an assertion if a Delegate=yes and User= unit exists and is running. Root cause: assertion path in systemd when the unit condition is met. Impact: results in an assertion (denial of service v...

5.5CVSS5.8AI score0.00086EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/04/10 3:10 p.m.•52 views

CVE-2026-40223

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

4.7CVSS0.00086EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/10 3:10 p.m.•16 views

CVE-2026-40223

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

4.7CVSS5.8AI score0.00086EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/04/10 3:10 p.m.•24 views

CVE-2026-40223

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

5.5CVSS5.8AI score0.00086EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/10 12:00 a.m.•14 views

openSUSE 16 Security Update : systemd (openSUSE-SU-2026:20471-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20471-1 advisory. Update to systemd v257.13: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method...

6.7CVSS6.9AI score0.00147EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/04/10 12:00 a.m.•31 views

Systemd security vulnerabilities

Systemd is a Linux-based system and service manager developed by Lennart Poettering of Germany. This product is compatible with SysV and LSB startup scripts, and it provides a framework for representing dependencies between system services. Prior to version 260, there were security vulnerabilitie...

6.4CVSS6.6AI score0.00144EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/10 12:00 a.m.•76 views

Systemd security vulnerabilities

Systemd is a Linux-based system and service manager developed by Lennart Poettering of Germany. This product is compatible with SysV and LSB startup scripts, and it provides a framework for representing dependencies between system services. Prior to version 260, there was a security vulnerability...

6.4CVSS7AI score0.00072EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/10 12:00 a.m.•3 views

CVE-2026-40225: Incorrect Resource Transfer Between Spheres

In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output...

6.4CVSS6.7AI score0.00144EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/10 12:00 a.m.•26 views

Systemd security vulnerabilities

Systemd is a Linux-based system and service manager developed by Lennart Poettering of Germany. This product is compatible with SysV and LSB startup scripts, and it provides a framework for representing dependencies between system services. Prior to version 260, there was a security vulnerability...

7.3CVSS6AI score0.00106EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/10 12:00 a.m.•32 views

PT-2026-31933

Name of the Vulnerable Software and Affected Versions systemd versions 259 through 259 Description A local privilege escalation exists in systemd-machined. This occurs because varlink, a lightweight communication protocol, can be used to reach the root namespace, allowing a local attacker to gain...

7.3CVSS5.9AI score0.00106EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/10 12:00 a.m.•5 views

CVE-2026-40223: Incorrect Behavior Order

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

5.5CVSS5.8AI score0.00086EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/10 12:00 a.m.•25 views

Systemd security vulnerabilities

Systemd is a Linux-based system and service manager developed by Lennart Poettering of Germany. This product is compatible with SysV and LSB startup scripts, and it provides a framework for representing dependencies between system services. Prior to version 260, there were security vulnerabilitie...

5.5CVSS6AI score0.00086EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/10 12:00 a.m.•15 views

PT-2026-31932

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

4.7CVSS5.8AI score0.00086EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/10 12:00 a.m.•8 views

CVE-2026-40224: Incorrect Authorization

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace...

7.3CVSS6AI score0.00106EPSS
SaveExploits1References1
Rows per page
Query Builder