Lucene search
K

49 matches found

Cvelist
Cvelist
added 2026/02/02 8:18 p.m.25 views

CVE-2026-0924 BuhoCleaner 1.15.2 - Local Privilege Escalation via PID reuse attack

BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15.2...

7.3CVSS0.00006EPSS
Exploits1References3
NVD
NVD
added 2026/02/02 2:16 p.m.4 views

CVE-2026-24071

It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting client to verify its code signature. This is considered insecure and can be exploited by PID reuse attacks. The connection handler function uses xpcconnectiongetpidarg2 as argument f...

7.8CVSS0.00006EPSS
Exploits1References1
CVE
CVE
added 2026/02/02 1:23 p.m.7 views

CVE-2026-24071

CVE-2026-24071 affects Native Instruments Native Access. The XPC service’s privileged helper uses the connecting client’s PID as input to hasValidSignature, which is insecure because PID values are untrusted and can be reused. This enables a local attacker to potentially bypass signature checks a...

7.8CVSS5.5AI score0.00006EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-7107

Malware in sbrugna...

9.3CVSS8.1AI score0.00802EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2024-48866

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.00026EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-16511

Malicious code in bioql PyPI...

4.7CVSS5AI score0.0003EPSS
Exploits2References4
RedhatCVE
RedhatCVE
added 2025/06/01 5:50 p.m.6 views

CVE-2025-5054

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS6.1AI score0.0003EPSS
Exploits2References1
OSV
OSV
added 2025/05/30 6:15 p.m.1 views

CVE-2025-5054

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS5.7AI score0.0003EPSS
Exploits2References4
NVD
NVD
added 2025/05/30 6:15 p.m.11 views

CVE-2025-5054

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS0.0003EPSS
Exploits2References4
Vulnrichment
Vulnrichment
added 2025/05/30 5:37 p.m.7 views

CVE-2025-5054 Race Condition in Canonical Apport

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS4.4AI score0.0003EPSS
Exploits2References3
CVE
CVE
added 2025/05/30 5:37 p.m.100 views

CVE-2025-5054

CVE-2025-5054 summary (Mode C) Affected software: Canonical Apport (Linux crash reporter) up to version 2.32.0. Vulnerability: A race condition in Apport’s crash handling logic allows a local attacker to leak sensitive information by abusing PID reuse and namespace/container handling. Specificall...

4.7CVSS6.1AI score0.0003EPSS
Exploits2References4Affected Software1
Cvelist
Cvelist
added 2025/05/30 5:37 p.m.33 views

CVE-2025-5054 Race Condition in Canonical Apport

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS0.0003EPSS
Exploits2References3
OSV
OSV
added 2025/05/29 12:0 a.m.1 views

UBUNTU-CVE-2025-5054

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS5.7AI score0.0003EPSS
Exploits2References3
RedhatCVE
RedhatCVE
added 2025/05/22 3:50 p.m.6 views

CVE-2020-14977

An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execut...

9.3CVSS7.5AI score0.00802EPSS
Exploits1
NVD
NVD
added 2024/11/25 6:15 p.m.10 views

CVE-2024-7915

The application Sensei Mac Cleaner contains a local privilege escalation vulnerability, allowing an attacker to perform multiple operations as the root user. These operations include arbitrary file deletion and writing, loading and unloading daemons, manipulating file permissions, and loading...

7.8CVSS0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/25 5:45 p.m.13 views

CVE-2024-7915 macOS Sensei Mac Cleaner Local Privilege Escalation via PID Reuse - Race Condition Attack

The application Sensei Mac Cleaner contains a local privilege escalation vulnerability, allowing an attacker to perform multiple operations as the root user. These operations include arbitrary file deletion and writing, loading and unloading daemons, manipulating file permissions, and loading...

7.8CVSS7.1AI score0.00026EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/25 5:45 p.m.23 views

CVE-2024-7915 macOS Sensei Mac Cleaner Local Privilege Escalation via PID Reuse - Race Condition Attack

The application Sensei Mac Cleaner contains a local privilege escalation vulnerability, allowing an attacker to perform multiple operations as the root user. These operations include arbitrary file deletion and writing, loading and unloading daemons, manipulating file permissions, and loading...

7.8CVSS0.00026EPSS
Exploits0References1
CVE
CVE
added 2024/11/25 5:45 p.m.47 views

CVE-2024-7915

CVE-2024-7915 affects Sensei Mac Cleaner. A local privilege escalation via PID reuse in the XPC-based SenseiHelper allows an attacker to impersonate a legitimate client and invoke arbitrary methods, potentially performing root-level actions. Reported capabilities include arbitrary file deletion/w...

7.8CVSS7.8AI score0.00026EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/17 12:0 a.m.3 views

PT-2024-30630 · Imagination Technologies · Powervr

Name of the Vulnerable Software and Affected Versions: PowerVR affected versions not specified Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, potentially gaining access to the graphics buffers of a parent process. This is...

8.4CVSS6.5AI score0.00047EPSS
Exploits0References9
OSV
OSV
added 2023/05/04 9:15 p.m.0 views

CVE-2023-30328

An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...

9.8CVSS7.3AI score
Exploits0References2
Rows per page
Query Builder