284572 matches found
libvirt: swtpm privilege escalation via symlink following
A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...
Important: Red Hat Security Advisory: libvirt security, bug fix, and enhancement update
An update for libvirt is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Dirty-Pipe-Exploit
Dirty-Pipe-Exploit The Dirty Pipe exploit CVE-2022-0847 is a Linux kernel vulnerability v5.8+ allowing unprivileged attackers to overwrite arbitrary files via a flaw in the pipe mechanism. This leads to privilege escalation, granting root access. Similar to Dirty Cow but easier to exploit. Fix:...
POC-CVE-2024-44258-Py
Conceptual PoC CVE-2024-44258: Symlink Vulnerability in iOS Requirement: Python 3.7+ • License: MIT ⚠️ Warning: This repository contains a proof-of-concept PoC developed for exclusively educational and research purposes. It is not a fully functional exploit. Its use on devices without proper...
porfolio-Baron-Samedit
porfolio-Baron-Samedit this is a study about CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samedit...
Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation
Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and patch validation strategies for enterprise defenders and red...
EUVD-2026-73921
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-83498
CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...
EUVD-2026-73918
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-69806
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-69806
CVE-2026-69806 is a .NET Elevation of Privilege vulnerability caused by exposure of sensitive information to an unauthorized actor, which an authorized local attacker can exploit to escalate privileges. The CVSS 3.1 score is 7.0 (HIGH) with the vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicat...
CVE-2026-83995
CVE-2026-83995 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with low attack complexity, low privileges required, and no user interaction needed, resulting in high impac...
EUVD-2026-73915
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83990
CVE-2026-83990 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with a local attack vector, low privileges required, no user interaction, and high impact on confidenti...
EUVD-2026-73913
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-83985
CVE-2026-83985 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability is rated CVSS 7.8 (HIGH) with full impact to confidentiality, integrity, and availability. Attack complexity is low, privileges required a...
EUVD-2026-73910
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73911
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83983
CVE-2026-83983 is a heap-based buffer overflow in the Windows Biometric Service component, allowing an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low privileges and no user in...