Astra Linux – Vulnerability in Thunderbird

In SkRegion.cpp, there is a potential out-of-bounds write due to an integer overflow. This could lead to a local privilege escalation without the need for additional execution privileges. User interaction is not required for exploitation...

Astra Linux – Vulnerability in binutils

A vulnerability was identified in GNU Binutils 2.45. The affected component is the elfx8664relocatesection function in the file elf64-x86-64.c of the Linker component. This vulnerability causes a heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly...

Astra Linux – Vulnerability in ofono

oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The...

Astra Linux – Vulnerability in binutils

The binutils version 2.32 and earlier contains an Integer Overflow vulnerability in objdump, bfdgetdynamicrelocupperbound, and bfdcanonicalizedynamicreloc. This vulnerability can lead to Integer Overflow, which in turn triggers Heap Overflow. Successful exploitation of this vulnerability allows f...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499-root-KernelSU A local privilege escalation ada...

CVE-2026-49927

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28593

A vulnerability exists in the getItemList method of SettingsFragment.java , where misleading or insufficient UI allows for a possible user interaction bypass . This flaw can lead to a local escalation of privilege without requiring additional execution privileges or user interaction for exploitat...

PT-2026-88227

In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-3156

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on Ubuntu 20.04 against sudo 1.8.31 All research credit: Qualys Research Team Check out the details on their blog. You can check your version of sudo is vulnerable with: $ sudoedit -s Y. If it asks f...

CVE-2026-20511

A memory corruption vulnerability exists in SurfaceFlinger caused by a use after free condition. This flaw could allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is available ...

PT-2026-86601

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053403)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053403 advisory. In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driverattach failed When driverattachdrv %NASLMINLEVEL 80900 C Tenabl...

CVE-2025-6019

Usage sudo apt install xfsprogs sudo su wget https://raw.githubusercontent.com/boboaung1337/CVE-2025-6019/refs/heads/main/exploit.sh && chmod +x exploit.sh ./exploit.sh Select mode: 1 Local: Create 300 MB XFS image requires root 2 Target: Exploit target system run on victim 3 Manual: Create XFS...

PUB-A-511554776

In mfwresourcesetaccessbyperm of resources.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

ASB-A-522376080

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-513140159

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-512056694

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend

A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description MUD URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL,...

Security update for qt6-svg (important)

openSUSE security update: security update for qt6-svg ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21626-1 Rating: important References: bsc1250994 Cross-References: CVE-2025-10729 CVSS scores: CVE-2025-10729 SUSE : 7...

kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write t...