Updated cifs-utils packages fix a security vulnerability

The updated packages fix a security vulnerability: Local privilege escalation via forged cifs.spnego key description in cifs.upcall. CVE-2026-12505...

Security Bulletin: IBM DataPower Gateway affected by local privilege escalation due to VMware Tools (CVE-2025-41244)

Summary IBM DataPower Gateway affected by local privilege escalation due to VMware Tools CVE-2025-41244 Vulnerability Details CVEID:CVE-2025-41244 DESCRIPTION: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrati...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via physical access to the device. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and...

CVE-2026-38764

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-38764

Protegent 360 v2.0.0.4 from Unistal Systems Pvt. Ltd. contains a local privilege escalation vulnerability in the kernel driver pgsecdl.sys (CVE-2026-38764). The issue enables a low-privilege local attacker to escalate to SYSTEM, with a CVSS v3.1 base score of 7.8 (High): Local, Low privileges req...

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

Cybersecurity researchers have disclosed details of a new local privilege escalation LPE vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 CVSS score: 7.8,...

RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)

Executive summary Qualys Threat Research Unit TRU identified CVE-2026-64600, a race condition in the Linux kernel’s XFS filesystem copy-on-write path. An attacker with an ordinary local account can exploit this race condition to overwrite protected files on disk and gain host root privileges on...

CVE-2026-14985

The CVE-2026-14985 affects Analog Way Picturall Quad Compact Mark II firmware version 3.5.8. A local privilege escalation exists in the core firmware due to improper privilege delegation and insufficient input validation in the maintenance script create_local_installer.sh. An attacker with local ...

EUVD-2026-47714

The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability in the core firmware. This is due to improper privilege delegation and insufficient input validation in a maintenance script...

CVE-2026-62145 Local Privilege Escalation in Gaia Portal

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges...

CVE-2026-14551

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

CVE-2026-14551

CVE-2026-14551 affects the servereye client (sensorhub), version 20.15 and earlier. A local privilege escalation occurs via the SE3Recovery service (EmergencyRecoveryService.exe), which runs as SYSTEM and periodically watches %ProgramData%\ServerEye3\update\ for a trigger file named update_availa...

libinput: local privilege escalation via crafted uinput devices

A flaw was found in libinput. A local attacker with access to /dev/uinput can inject arbitrary udev properties through the libinput-device-group helper. This injection can lead to root code execution, for example, by exploiting REMOVECMD properties that are executed when a device is removed. This...

pedit-cow-exploit

CVE-2026-46331 – pedit COW Local Privilege Escalation Proof-of...

CVE-2026-56844

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system...

PT-2026-63421

Name of the Vulnerable Software and Affected Versions Analog Way Picturall Quad Compact Mark II version 3.5.8 Description A local privilege escalation flaw exists in the core firmware due to improper privilege delegation and insufficient input validation within a maintenance script. The create...

CVE-2026-38765

CVE-2026-38765 affects Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4. The issue is a local privilege escalation via the kernel driver pgsecdl.sys. CVSS v3.1 base score 7.8 (HIGH): Local attacker with low privileges and no user interaction could achieve high confidentiality, integrity, and avai...

PT-2026-63424

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and...