Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from the lack of boundary checks in the EfwApTransport::ProcessRxRing function, leading to out-of-bound writing and potentially allowing for local privilege escalation...

PT-2026-24435

Name of the Vulnerable Software and Affected Versions KVM versions affected versions not specified Description An out-of-bounds write issue exists in the hyp alloc function within arch/arm64/kvm/hyp/nvhe/alloc.c. This is due to insufficient input validation. Successful exploitation could lead to...

Fortinet FortiClientLinux 安全漏洞

Fortinet FortiClientLinux is a security client software developed by the American company Fortinet. There are security vulnerabilities in versions 7.4.0 to 7.4.4 of Fortinet FortiClientLinux, as well as in versions 7.2.2 to 7.2.12 of FortiClientLinux. These vulnerabilities stem from UNIX symbolic...

PT-2026-24306

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A flaw exists in the Windows Ancillary Function Driver for WinSock due to improper input validation. This allows a local attacker to gain elevated privileges. The issue affects all...

PT-2026-24274

🚨 CVE-2026-23671 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-24270

Уязвимость расширения для управления виртуальными машинами Azure Azure Diagnostics для Linux Virtual Machines связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-24292

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

PT-2026-24446

In mfc dec dqbuf of mfc dec v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-24331

Name of the Vulnerable Software and Affected Versions Windows 10 Version 1607 Windows Server 2025 Windows Server 2011 Description Improper authentication in the Windows SMB Server allows an authorized attacker to elevate privileges locally. The issue involves a Kerberos reflection bypass, which c...

PT-2026-24412

Array Networks MotionPro ArrayInstallManager Incorrect Permission Assignment Local Privilege Escalation Vulnerability...

Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

Exploit for Improper Privilege Management in Microsoft

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation...

K000160226: Intel 800 Series Ethernet vulnerability CVE-2025-24325

Security Advisory Description Improper input validation in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2025-24325 Impact This flaw allows an authenticated...

CVE-2026-3038

The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not necessarily the case, and it's...

kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free

A flaw was found in the Linux kernel's iouring subsystem. A local attacker with low privileges could exploit a use-after-free vulnerability when the sq-thread object is prematurely released while still being accessed by the iouringshowfdinfo function. This flaw could lead to privilege escalation,...

CVE-2026-3796

A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIOImp.sys of the component Mini Filter Driver. Executing a manipulation can lead to improper access controls. The attack is restricted to...

kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free

A flaw was found in the Linux kernel's iouring subsystem. A local attacker with low privileges could exploit a use-after-free vulnerability when the sq-thread object is prematurely released while still being accessed by the iouringshowfdinfo function. This flaw could lead to privilege escalation,...

Unspecified Vulnerability in Google Android (CNVD-2026-14652)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from a logic error in the onStart function of CompanionDeviceManagerService.java, which can be exploited by an attacker to cause a local elevation of...

Unity Linux 20.1070e Security Update: xorg-x11-server (UTSA-2026-005922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005922 advisory. A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest...