@x86byte: I found a Local Privilege Escalation (LPE) in adm-zip. Crafted ZIP external attrs carry SUID/SGID bits into fs.chmodSyn…
Summary
A Local Privilege Escalation vulnerability in adm-zip allows crafted ZIP files to set SUID/SGID bits, enabling root access for local users when extracted as root. The issue has been patched in version 0.6.1.
View Cached Full Text
Cached at: 09/13/26, 03:13 PM
I found a Local Privilege Escalation (LPE) in adm-zip. Crafted ZIP external attrs carry SUID/SGID bits into fs.chmodSync() when keepOriginalPermission=true. Extraction as root plants a setuid root binary; any local user gets root. High/CWE-732. Used by 2M users. Patched in 0.6.1 https://t.co/8Du09YBEE2
Similar Articles
CVE-2026-45257: LPE in FreeBSD via kTLS-RX
A critical local privilege escalation vulnerability in FreeBSD (CVE-2026-45257) allows an unprivileged user to write arbitrary data into the page cache of any readable file, bypassing file permissions and flags, leading to full root compromise. The bug affects default installations of FreeBSD 13.0 and later via unsafe composition of sendfile, KTLS, and in-kernel AES-GCM decryption.
You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)
A local privilege escalation exploit in the Linux kernel's io_uring subsystem via a zero-copy receive freelist bug.
RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)
Qualys and Anthropic disclose CVE-2026-64600, a race condition in the Linux kernel's XFS filesystem that allows local privilege escalation to root, affecting over 16 million systems, with no kernel log output and survival across reboots.
Dirtyfrag: Universal Linux LPE
A report titled 'Dirty Frag' details a universal Linux Local Privilege Escalation (LPE) vulnerability that allows root access on major distributions by chaining two kernel bugs. The disclosure notes that due to a broken embargo, no patches currently exist for this critical security issue.
Unprivileged root via an out-of-bounds write in the FUSE readdir cache (CVE-2026-31694)
A vulnerability in the Linux kernel's FUSE readdir cache (CVE-2026-31694) allows unprivileged local users to escalate to root via an out-of-bounds write. The bug affects many desktop distributions and can be exploited by mounting a FUSE filesystem.