33323 matches found
CVE-2026-53803
Technical details are not publicly available in the provided documents (no concrete affected products, versions, or fixes are described). Monitor for updates.
ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
Description src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts both compute their temporary working-file paths as: ts const randNum = Math.floorMath.random 0xFFFFFFFF; const srcFile = $os.tmpdir/etherpadexport$randNum.html; const destFile =...
CVE-2026-0299
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0295
The provided data identifies CVE-2026-0295 as a race condition in the Palo Alto Networks GlobalProtect client on macOS, allowing a locally authenticated low-privileged attacker to escalate to root. Affected: GlobalProtect macOS client. Not affected: GlobalProtect apps on Linux, Windows, iOS, Andr...
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...
CVE-2026-0293
Prisma Access Agent for Windows is affected by CVE-2026-0293, which enables a local attacker with administrator privileges to bypass anti-tamper protection and gain unauthorized access to protected processes and files. The vulnerability does not affect Prisma Access Agent on Linux, macOS, iOS, An...
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...
EUVD-2026-57705
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS,...
Security Updates for Microsoft Outlook Products C2R (August 2026)
The Microsoft Outlook Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-70329 - Heap-based buffer overflow in Microsof...
PT-2026-71637
rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to unintended files by substituting a symlink at a predictable destination path between the file write and the subsequent acl set file or...
Linux Distros Unpatched Vulnerability : CVE-2026-73584
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary...
CVE-2026-66016
Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...
CVE-2026-66016
Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...
CVE-2026-66016 Rendered Artifactory Helm manifests may contain generated TLS private keys
Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...
Exploit for CVE-2026-68398
CVE-2026-68398: Ubuntu PPPoL2TP use-after-free to local root...
CVE-2026-12232
The CVE concerns the Intel ALH DAI driver in Zephyr. The function dai_alh_get_properties() uses a caller-supplied stream_id without proper bounds checks, indexing a fixed 64-entry alh_handshake_map and potentially reading beyond the intended range. This results in a one-byte-per-call arbitrary-of...
kernel: xen/privcmd: fix double free via VMA splitting
A flaw was found in the Linux kernel's xen/privcmd module. A local user could exploit this by performing a partial unmapping of a privcmd memory region. This action causes a Virtual Memory Area VMA to split, leading to duplicated internal memory pointers. As a result, the same memory can be freed...
PT-2026-71323
Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 14.10 IBM Informix Dynamic Server version 15.0 Description A local privilege escalation issue exists in the oninit setuid-root utility. This allows a local user to gain elevated privileges on the system...