Lucene search
+L

685 matches found

SUSE CVE
SUSE CVE
added 2026/04/15 1:42 p.m.12 views

SUSE CVE-2026-5713

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

6CVSS5.8AI score0.00132EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/14 9:25 p.m.11 views

CVE-2026-5713

A flaw was found in Python. A malicious Python process could exploit the "profiling.sampling" module and "asyncio introspection capabilities" to read and write memory addresses within a privileged process. This vulnerability occurs when the privileged process connects to the malicious process via...

6CVSS6AI score0.00132EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/14 6:30 p.m.10 views

EUVD-2026-22311

The Python remote debugging feature could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via the remote debugging feature. This vulnerability requires persistently and repeatedly connecting to the process to be...

5.3CVSS5.8AI score0.00132EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/14 4:16 p.m.6 views

CVE-2026-5713

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

5.3CVSS0.00132EPSS
SaveExploits0References6
OSV
OSV
added 2026/04/14 4:16 p.m.5 views

DEBIAN-CVE-2026-5713

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

5.3CVSS5.4AI score0.00132EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/04/14 4:16 p.m.16 views

CVE-2026-5713

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

5.3CVSS5.8AI score0.00132EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/14 4:16 p.m.9 views

UBUNTU-CVE-2026-5713

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

5.3CVSS5.8AI score0.00132EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/04/14 3:11 p.m.6 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the profiling.sampling module of asyncio introspection capabilities feature when a privileged process connects to a malicious process via the remote debugging tool. An attacker can read and write memory...

6CVSS6AI score0.00132EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/14 3:11 p.m.3 views

CVE-2026-5713 Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

5.3CVSS5.8AI score0.00132EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/04/14 3:11 p.m.9 views

CVE-2026-5713

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

5.3CVSS5.3AI score0.00132EPSS
SaveExploits0
OSV
OSV
added 2026/04/14 3:11 p.m.14 views

PSF-2026-19

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

5.3CVSS5.8AI score0.00132EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/14 3:11 p.m.3 views

CVE-2026-5713 Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target

The "profiling.sampling" module Python 3.15+ and "asyncio introspection capabilities" 3.14+, "python -m asyncio ps" and "python -m asyncio pstree" features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via t...

5.3CVSS6.3AI score0.00132EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-5713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The profiling.sampling module Python 3.15+ and asyncio introspection capabilities 3.14+, python -m asyncio ps and python -m asyncio pstree features could be use...

5.3CVSS6.3AI score0.00132EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.13 views

PT-2026-32696

Name of the Vulnerable Software and Affected Versions CPython versions 3.14 and later Description The profiling.sampling module and asyncio introspection capabilities, specifically the 'python -m asyncio ps' and 'python -m asyncio pstree' commands, allow for out-of-bounds read and write operation...

5.7CVSS5.8AI score0.00202EPSS
SaveExploits0References97
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.15 views

IDrive 安全漏洞

IDrive is a cloud backup and cloud storage service solution provided by the American company IDrive. There is a security vulnerability in IDrive, which stems from the idservice.exe process using privileged access to read files. This vulnerability could allow attackers to specify any executable pa...

7.8CVSS7.5AI score0.00171EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/18 6:31 p.m.7 views

EUVD-2026-12910

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do privileged policy management An unprivileged local user can load, replace, and remove profiles by opening the apparmorfs interfaces, via a confused deputy attack, by passing the opened...

5.7AI score0.00134EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/18 5:54 p.m.4 views

CVE-2026-23268

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do privileged policy management An unprivileged local user can load, replace, and remove profiles by opening the apparmorfs interfaces, via a confused deputy attack, by passing the opened...

7.8CVSS5.7AI score0.00134EPSS
SaveExploits0References10Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/16 7:30 p.m.9 views

CVE-2025-32453

Incorrect default permissions for some IntelR Graphics Driver software within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

6.7CVSS5.4AI score0.00109EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/12 9:57 p.m.13 views

CVE-2026-26225

Intego Personal Backup on macOS is affected by a local privilege escalation due to processing of crafted serialized task files. Task definitions are stored in a location writable by non-privileged users, but are processed with elevated privileges, allowing an attacker to perform arbitrary file wr...

8.5CVSS5.7AI score0.00181EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.8 views

PT-2026-7307

Name of the Vulnerable Software and Affected Versions IntelR Graphics Driver affected versions not specified Description A configuration issue with default permissions within some IntelR Graphics Driver software operating in Ring 2—a privileged process—could allow an escalation of privilege. An...

6.7CVSS5.4AI score0.00109EPSS
SaveExploits0References3
Rows per page
Query Builder