CVE-2021-3156

CVE-2021-3156 Overview Heap-based buffer overflow in Sudo CVE-2021-3156 Heap overflow vulnerability caused by improper escaping of \ in sudo, LPE Affected Versions All versions from 1.8.2 to 1.8.31p2 All stable versions from 1.9.0 to 1.9.5p1 Detection Command sudoedit -s '' perl -e 'print "A" x...

Pwnkit-CVE-2021-4034-LPE

Pwnkit - CVE-2021-4034 Local Privilege Escalation Tested On OS: Ubuntu 20.04 pkexec: 0.105 PoC: root@kitploit: gcc pwnkit.c -o exploit && ./exploit Vulnerability CVE: CVE-2021-4034 Affected Component: pkexec Vulnerability Type: Local Privilege Escalation...

CVE-2026-87276

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to the host to achieve full takeover of the product, with high impact on confidentiality, integrity, and availability . The attack is rated difficult to expl...

CVE-2026-83274

CVE-2026-83274 affects the CAX Client component of Oracle Agile PLM MCAD Connector version 3.6 (Oracle Supply Chain). A local attacker with low privileges and logon access to the infrastructure where the connector executes can exploit this vulnerability with low complexity and no user interaction...

CVE-2026-83239

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller ) version 11.4.0 is affected by a local vulnerability that can lead to full takeover of the product. The attack vector is local with high complexity and requires a low-privileged account w...

EUVD-2026-79352

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity...

Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag

Reporte de Escalada de Privilegios Local — Dirty Frag Estudiante: Jonatan Claudio 1. Requerimientos Resumen de la metodología Se realizó una evaluación de vulnerabilidades sobre una máquina virtual con Kali Linux utilizando un script detector para la vulnerabilidad Dirty Frag, asociada a las...

Detection-and-Mitigation-for-CVE-2022-1679

Detection-and-Mitigation-for-CVE-2022-1679 The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw...

CVE-2026-58773

In linkloadgnssimage of linkdevice.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58747

In smmudetachdev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58755

In smmuinstallnestedste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58734

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58739

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58751

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58679

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58695

In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58691

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57014

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56992

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...