CVE-2026-40369

🚨 CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. 📖 Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...

CVE-2024-48990

CVE-2024-48990 hello this is 0x3bs In victim machine: set -e cd /tmp 1. Create the malicious module directory structure mkdir -p malicious/importlib in attacker machine to compile lib.c in attacker machine : gcc -shared -fPIC -o exp.so lib.c and in vivtim machine : in /tmp chmod +x run.sh in...

CVE-2026-98915

A flaw was found in the Linux kernel's video-i2c driver. This vulnerability can lead to a denial of service DoS caused by memory corruption during driver unloading. The driver unregisters the video device without properly disconnecting the video buffer queue. A local user with administrative...

EUVD-2026-118924

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a local attacker to obtain sensitive information due to the use of a cryptographically weak pseudo-random number generator...

CVE-2026-17393

IBM API Connect versions 10.0.8.0 through 10.0.8.12 are affected by a vulnerability that allows a local attacker to obtain sensitive information . The root cause is the use of a cryptographically weak pseudo-random number generator (CWE-338). While the impact on confidentiality is high, the attac...

EUVD-2026-118638

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a local attacker to obtain sensitive information due to improper use of cryptography. The encryption applied to stored data is not implemented with sufficient strength, which weakens its protection...

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

CVE-2026-93797

A flaw was found in the Linux kernel's iwlwifi wireless driver. An off-by-one boundary check fails to verify that data length is sufficient before accessing memory, resulting in an out-of-bounds read. A local attacker on a system with affected Intel wireless hardware can exploit this vulnerabilit...

CVE-2026-111253

A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not verify that the caller is the unique sender that created the session. A local attacker can modify another user's live package-management session and replace its resolved transaction plan. I...

CVE-2026-109683

A newline injection vulnerability exists in the UPnP service of Archer BE805 v1 such that an adjacent attacker can supply newline characters in a UPnP port-mapping description due to improper sanitization, resulting in possible injection of unintended content into UPnP port-mapping data. Successf...

CVE-2026-121549

nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and...

CVE-2026-97550

A flaw was found in the Linux kernel's XFS file system. An inverted unit conversion during transaction log space calculations causes the file system to improperly reserve log resources. An authenticated local attacker could exploit this vulnerability during file system operations to cause system...

CVE-2026-97445

A flaw was found in the Linux kernel's ACPICA ACPI Component Architecture component. Insufficient validation of buffer boundaries in the acpiutwalkamlresources function can lead to a buffer overflow when processing ACPI Machine Language AML resource templates. A local attacker could exploit this...

CVE-2026-12067

Missing exception handlers in AvastSvc native message dispatcher ashServ.dll on Windows allow a local, unprivileged attacker to crash the service by sending specially crafted JSON messages. The vulnerability spans multiple handler pathways in the RPC-based native message protocol: LogNmSvc.messag...

EUVD-2026-118329

Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's...

USN-9002-1 linux-nvidia-tegra vulnerabilities

It was discovered that the iouring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local attacker could possibly use this to cause a denial of service system...

USN-9002-1: Linux kernel (NVIDIA Tegra) vulnerabilities

It was discovered that the iouring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local attacker could possibly use this to cause a denial of service system...

EUVD-2026-118027

Invocation of the Jolokia special agent with the login password in the command line in Checkmk versions 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the Jolokia login password from the process list while the special agent is running. This affects both explicitly...

CVE-2026-103682

In Checkmk versions 2.5.0 before 2.5.0p16 , a local user on the Checkmk server can read the Jolokia login password from the process list while the special agent is running. This is caused by the invocation of the Jolokia special agent with the password provided directly in the command line. This ...