ROS-20260430-73-0007

Vulnerability in crun related to insecure privilege management. Exploitation of the vulnerability could allow an attacker to escalate privileges...

The vulnerability of the compatibility package for Microsoft Azure Entra ID and Intune – Himmelblau – relates to insecure management of privileges, allowing an attacker to elevate their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID and Intune – identified by Himmelblau – involves insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the /etc/shadow.sample file in D-Link DIR-1253 router microprogramming software allows a hacker to gain increased privileges.

The vulnerability of the /etc/shadow.sample file in D-Link DIR-1253 MESH router microprogramming software is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to elevate their privileges remotely...

ROS-20260330-73-0001

A vulnerability in the LSILogic module of the Oracle VM VirtualBox virtualization software tool is associated with insecure privilege management due to incorrect memory freeing. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the FreeBSD operating system’s kernel, which allows a hacker to gain access to the file system

The vulnerability of FreeBSD operating systems lies in the insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to gain access to the file system...

The vulnerability of the mptcp_worker() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpworker function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260209-73-0015

Vulnerability in sssd related to insecure privilege management. Exploitation of the vulnerability could allow an attacker to escalate privileges...

The vulnerability of the application programming interface of the Grafana monitoring and observation platform allows a perpetrator to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the application programming interface of the Grafana monitoring and observation platform is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected informatio...

The vulnerability of the Netmonitor component affects browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing attackers to escalate their privileges.

The vulnerability of the Netmonitor component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the HPE OneView IT infrastructure management system, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the HPE OneView IT infrastructure management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Cisco Catalyst Center (formerly Cisco DNA Center) network infrastructure management system, related to insecure management of privileges, allows attackers to escalate their privileges.

The vulnerability of the Cisco Catalyst Center formerly Cisco DNA Center network infrastructure management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the container management system and the virtual machine manager Incus, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the container management system and the Incus virtual machine manager is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

ROS-20251216-7319

Vulnerability in VirtualBox-kmod related to insecure privilege management. Exploitation of the vulnerability could allow an attacker to escalate privileges...

ROS-20251216-7318

Vulnerability in VirtualBox related to insecure privilege management. Exploitation of the vulnerability could allow an attacker to escalate privileges...

ROS-20251216-7320

Vulnerability in virtualbox-guest-additions related to insecure privilege management. Exploitation of the vulnerability could allow an attacker to escalate privileges...

The vulnerability of Oracle VM VirtualBox’s kernel allows a hacker to gain unauthorized access to data.

The vulnerability of Oracle VM VirtualBox’s kernel is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to data...

The vulnerability of the `clone_private_mnt()` function in the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the cloneprivatemnt function in the Linux operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...

The vulnerability of the bad_syscall() function in the arch/arm/kernel/traps.c module, which is part of the Linux operating system’s ARM kernel support, allows a attacker to cause a service failure.

The vulnerability of the badsyscall function in the arch/arm/kernel/traps.c module of the Linux operating system’s ARM platform-related support module is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the command-line interface (CLI) of FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the command-line interface CLI of FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system are related to insecure privilege management. Exploiting this vulnerability could allow an attacker to...