153 matches found
CVE-2026-64111
A flaw was found in the Linux kernel's Security Module LSM. A local attacker could exploit this vulnerability by leveraging an improper handling of a credential guard mutex in the lsmsetselfattr function. This oversight may allow the attacker to bypass security restrictions enforced by modules su...
CVE-2026-64111 lsm: hold cred_guard_mutex for lsm_set_self_attr()
In the Linux kernel, the following vulnerability has been resolved: lsm: hold credguardmutex for lsmsetselfattr Just as procpidattrwrite already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allo...
CVE-2026-64111
The CVE-2026-64111 issue affects the Linux kernel where lsm_set_self_attr() did not hold cred_guard_mutex in the same way as proc_pid_attr_write() before calling the LSM hook. The fix ensures the mutex is held, reducing risk related to SELinux and AppArmor decisions based on whether a process is ...
EUVD-2026-3111
Microsoft Edge Elevation Service exposes a privileged COM interface that inadequately validates the privileges of the calling process. A standard non‑administrator local user can invoke the IElevatorEdge interface method LaunchUpdateCmdElevatedAndWait, causing the service to execute privileged...
CVE-2026-21223
Improper privilege management in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper privilege management in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...
EUVD-2022-37654
Malicious code in bioql PyPI...
EUVD-2022-27077
Malicious code in bioql PyPI...
EUVD-2022-37660
Malicious code in bioql PyPI...
EUVD-2022-37662
Malicious code in bioql PyPI...
EUVD-2022-38695
Malicious code in bioql PyPI...
EUVD-2024-23513
Malicious code in bioql PyPI...
EUVD-2022-37655
Malicious code in bioql PyPI...
EUVD-2022-27185
Malicious code in bioql PyPI...
EUVD-2022-35358
Malicious code in bioql PyPI...
EUVD-2022-37659
Malicious code in bioql PyPI...
EUVD-2022-37661
Malicious code in bioql PyPI...
Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud
Okta is warning that a cross-origin authentication feature in Customer Identity Cloud CIC is susceptible to credential stuffing attacks orchestrated by threat actors. "We observed that the endpoints used to support the cross-origin authentication feature being attacked via credential stuffing for...
The vulnerability of Windows Defender Credential Guard, a security feature for Windows operating systems, allows attackers to escalate their privileges.
The vulnerability of Windows Defender Credential Guard, a security feature for handling credentials on Windows operating systems, is related to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to increase their privileges...