Windows Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2021-3493-Exploit

CVE-2021-3493-Exploit A proof-of-concept local privilege escalation exploit for CVE-2021-3493, written in C. 📌 Description This repository contains a C implementation of the exploit for CVE-2021-3493. This is a Local Privilege Escalation LPE vulnerability in the OverlayFS implementation in the...

CVE-2026-90082

A flaw was found in the mana network driver within the Linux kernel. This vulnerability occurs because the driver incorrectly calculates the number of Message Signaled Interrupts MSI-X vectors, leading to an out-of-bounds write. A local attacker, by operating a specially crafted virtual machine,...

CVE-2026-90132

A flaw was found in the Linux kernel's NTFS filesystem. This vulnerability allows an unprivileged local user to bypass intended access controls by modifying reserved extended attributes xattrs, such as $LXUID, $LXGID, $LXMOD, and $LXDEV, through the setxattr function. This unauthorized modificati...

CVE-2026-90127

A flaw was found in the Linux kernel's virtio-rtc driver. This vulnerability occurs because alarm requests lack a timeout. A local attacker could exploit this by triggering a surprise removal of a virtio device while an alarm request is pending. This action causes the device removal process to ha...

CVE-2026-90112

A flaw was found in the qlcnic driver in the Linux kernel. This vulnerability occurs due to insufficient validation of unified ROM sections when processing firmware files. A local attacker could provide a specially crafted or truncated firmware image, leading the driver to read beyond its allocat...

CVE-2026-109409

A command injection vulnerability exists in the HBAI-Ltd Toonflow-app up to version 1.1.8 . The flaw is located in the child_process.exec function within the file src/routes/setting/fileManagement/openFolder.ts of the Open Folder Endpoint component. An attacker can trigger command injection by ma...

CVE-2026-109409 HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injection

A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function childprocess.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The...

CVE-2026-7574

🚨 CVE-2026-7574 — Claude Desktop Cowork VM Integrity Bypass Anthropic Claude Desktop Cowork VM Image Integrity Bypass 🔥 Local Persistence Through VM Image Tampering An integrity validation weakness allowing modification of the Claude Desktop Cowork VM filesystem image rootfs.img, enabling...

CVE-2026-90055

A flaw was found in the Linux kernel's USB ATM Asynchronous Transfer Mode driver. An invalid initialization of the cirange fields, specifically vpibits and vcibits, to a negative sentinel value can lead to a shift-out-of-bounds error. This undefined behavior can be triggered by a local user...

CVE-2026-109244

A flaw was found in FreeRDP. The winpr-makecert utility creates unencrypted private key and certificate archive files without restricting permissions to the file owner, and it assigns a hardcoded default password to exported archives. A local user on a multi-user system can exploit this flaw to...

CVE-2026-109243

A flaw was found in FreeRDP. When software-based smartcard authentication is used on multi-user systems, FreeRDP writes a temporary copy of the private key to a shared directory without enforcing owner-only file permissions. A local, unprivileged attacker can access this shared directory and read...

CVE-2021-4034

CVE-2021- A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling...

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2026-72895

A vulnerability exists in several SIMATIC IPC models, specifically SIMATIC IPC BX-21A (versions < V31.01.13), SIMATIC IPC RW-543A (versions < V1.1.4), and SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (versions

CVE-2026-108978

A flaw was found in rlottie. A heap-based buffer overflow vulnerability occurs when the library processes environment variables. A local attacker could exploit this issue by enticing a user to execute an application with specially crafted environment variables, leading to an application crash and...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Privilege Escalation with Dirty COW CVE-2016-5195 Author: Samuel García Academy: 4Geeks Academy Date: 25/06/2025 Description Dirty COW is a critical Linux kernel vulnerability ≤ 4.8.3 that allows a local attacker to modify read-only files through a race condition, escalating privileges to root...

CVE-2026-103316

The macOS version of the DigiD app is vulnerable because it is not signed with Hardened Runtime . This allows a local process to load a malicious dylib into the app using the DYLD_INSERT_LIBRARIES environment variable. An attacker with local user-level code execution can exploit this to execute a...

copy-fail-checker

Copy Fail Checker — CVE-2026-31431 A small, dependency-light Bash script that tells you whether your Linux system is exposed to the Copy Fail local privilege-escalation vulnerability CVE-2026-31431. The script is read-only : it never exploits the bug, never loads kernel modules, and never modifie...