Tag
A macOS vulnerability allows attackers to silently replace trusted app executables without elevated privileges, enabling impersonation in permission prompts; Apple declined to fix it.
Qualys and Anthropic disclose CVE-2026-64600, a race condition in the Linux kernel's XFS filesystem that allows local privilege escalation to root, affecting over 16 million systems, with no kernel log output and survival across reboots.
A blog post detailing a local privilege escalation vulnerability (CVE-2026-50343) in the Windows Install Service on Windows 11, allowing a standard user to execute code as SYSTEM by exploiting a writable plugin map and a user-plantable COM server.
A Windows 0-day vulnerability called LegacyHive allows non-admin users to escalate privileges by abusing how Windows loads user class hives, with Microsoft investigating and detection scripts available.
A vulnerability in Tailscale SSH allowed users to gain root access by using a crafted username with a leading dash. The issue is fixed in version 1.98.9.
GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel stack use-after-free vulnerability affecting all distributions, allowing local privilege escalation and container escape. Detailed exploitation techniques are presented.
A use-after-free vulnerability in OpenBSD through version 7.9 allows local attackers to escalate privileges to root. The flaw exists in sysv_sem.c and is identified as CVE-2026-57589.
A Linux kernel zero-day vulnerability (CVE-2026-43456) rooted in code from 2007 was discovered by Yuki Koike and Kota Toda, rewarded over $80,000 via Google's kernelCTF. The flaw, a type confusion in the net/bonding subsystem, allows reliable privilege escalation within one second.
Bad Epoll (CVE-2026-46242) is a race-condition use-after-free vulnerability in the Linux kernel's epoll subsystem that allows unprivileged users to escalate to root on both Linux and Android devices. It was reported by Jaeyoung Chung and was missed by Anthropic's Mythos AI.
A security researcher discovered severe vulnerabilities in MSI Center that allow any authenticated user to gain SYSTEM privileges via a named pipe service, enabling registry modification, WMI control, and arbitrary code execution as LocalSystem.
This article announces the first browser-to-kernel full-chain remote code execution exploit on Android 17, with source code to be released soon.
GNU Guix discloses multiple security vulnerabilities in 'guix substitute' and 'guix pull' that allow remote privilege escalation to the build daemon user, remote store corruption, potential local file disclosure, and denial-of-service; users are urged to upgrade immediately.
A vulnerability in the Linux kernel's FUSE readdir cache (CVE-2026-31694) allows unprivileged local users to escalate to root via an out-of-bounds write. The bug affects many desktop distributions and can be exploited by mounting a FUSE filesystem.
Proof of concept for a Linux local privilege escalation and container/jail escape via an IPv6 fragmentation bug in the kernel, targeting CentOS/RHEL 10.
A single faulty character in the Linux kernel introduced a use-after-free vulnerability (CVE-2026-53111) allowing unprivileged users to escalate privileges to root on Debian and Ubuntu systems; the bug has been fixed and backported.
AI tools are accelerating the discovery and public disclosure of Linux kernel bugs, creating a worrisome trend of frequent privilege-escalation vulnerabilities that may require weekly server reboots. Linus Torvalds has changed how the Linux security community handles AI-discovered bugs, treating them as public by default.
Qualys discloses a logic bug in the Linux kernel's __ptrace_may_access() function (CVE-2026-46333), allowing local privilege escalation and information disclosure. The vulnerability, present since 2016, affects multiple distributions with four proof-of-concept exploits developed by Qualys.
Copy Fail is a new Linux local privilege escalation vulnerability that exploits a kernel memory corruption flaw to rewrite the page cache, enabling cross-container attacks and container escape.
Gentoo Linux reports on the Copy Fail, Dirty Frag, and Fragnesia kernel vulnerabilities, noting that they have patched supported kernels and advising users to upgrade.
Anthropic's Mythos AI model helped cybersecurity firm Calif discover two previously undocumented macOS vulnerabilities that could bypass Apple's memory integrity enforcement, demonstrating the model's offensive capabilities under controlled access via Project Glasswing.