30822 matches found
CVE-2026-17523
A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...
EUVD-2026-49133
A flaw was found in the kernel. An unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control of the affected system...
CVE-2026-17523 Kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges
A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...
BIT-DOTNET-2026-50650 .NET Framework Elevation of Privilege Vulnerability
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
Exploit for CVE-2026-64600
VQ-RefluxCore: Kernel Vulnerability Assessment & Research Fram...
CVE-2026-10610
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...
CVE-2026-10610 Local privilege escalation in ESET security applications for macOS
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...
EUVD-2026-48558
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...
CVE-2026-10610
CVE-2026-10610 affects ESET security applications for macOS. It is a Local Privilege Escalation that could allow a low-privileged user to execute arbitrary code with elevated privileges. Exploitation would be LOCAL with LOW complexity and no user interaction required; the impact targets confident...
CVE-2026-10610
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...
CVE-2026-7483
Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...
EUVD-2026-48551
Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...
CVE-2026-7483
Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...
CVE-2026-7483
CVE-2026-7483 describes a local privilege escalation in ESET security applications for macOS that potentially allows a low-privilege attacker to write an arbitrary file with content under a privileged user. The initial and connected documents state the impact as high on confidentiality, integrity...
CVE-2026-14172
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential Scan Engine or as root/SYSTEM Insight Agent. Fixed in Scan Engine content...
CVE-2026-14172
CVE-2026-14172 affects Rapid7 InsightVM, Nexpose, and the Insight Agent. The issue allows a local, low-privilege user to execute discovered executables during authenticated assessments due to lack of file ownership validation, enabling code execution as the scan credential (Scan Engine) or as roo...
CVE-2026-14172 Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential Scan Engine or as root/SYSTEM Insight Agent. Fixed in Scan Engine content...
PT-2026-64274
Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...
CVE-2026-65010
The CVE-2026-65010 entry covers a symlink-following vulnerability in Datasets (versions up to 5.00) within Extractor.extract(), where pre-placed symlinks at predictable output paths allow a local attacker to write arbitrary files in shared-cache environments. This could enable overwriting sensiti...
