6471 matches found
EUVD-2026-15039
A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be able to elevate privileges...
CVE-2026-20631: Undefined Security Weakness
A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be able to elevate privileges...
CVE-2026-20114: Improper Validation of Syntactic Correctness of Input
A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador users. This vulnerability exists because...
PT-2026-27528
Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description A logic issue was addressed with improved checks. This could allow a user to elevate privileges. Recommendations Update to macOS Tahoe 26.4...
OpenClaw 安全漏洞
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain higher operator range before pairing approval...
WordPress plugin Aimogen Pro 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
Microsoft Exchange Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...
CVE-2026-26137: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...
PT-2026-26356
Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description Server-side request forgery ssrf exists in Microsoft Purview, potentially allowing an unauthorized attacker to elevate privileges over a network. SSRF occurs when a server processes...
CVE-2026-26138: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-32169: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-23658: Insufficiently Protected Credentials
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-3564 ScreenConnect Instance Level Cryptographic Material Exposure
A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently...
CVE-2026-3841 Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400
A command injection vulnerability has been identified in the Telnet command-line interface CLI of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during specific CLI operations. An authenticated attacker with elevated privileges may be able to execute...
About Elevation of Privilege - Windows RDS (CVE-2026-21533) vulnerability
About Elevation of Privilege - Windows RDS CVE-2026-21533 vulnerability. The vulnerability is from the February Microsoft Patch Tuesday. Remote Desktop Services RDS is a component of Microsoft Windows that allows a user to initiate and control an interactive session on a remote computer or virtua...
Zoom Clients for Windows 安全漏洞
Zoom Clients for Windows is a video conferencing software developed by the American company Zoom. There is a security vulnerability in Zoom Clients for Windows, which stems from improper version checking in the update function. This vulnerability could allow authenticated users to gain elevated...
Incorrect Default Permissions
Overview Affected versions of this package are vulnerable to Incorrect Default Permissions. An attacker can gain elevated privileges by exploiting these permissions locally. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-arm64 to version 10.0.4 or higher. References - Vulnerability Advis...
EUVD-2026-10659
Improper link resolution before file access 'link following' in Winlogon allows an authorized attacker to elevate privileges locally...