CVE-2026-62145: Check Point Gaia Portal Privilege Management Vulnerability
An improper privilege management vulnerability in Check Point Gaia Portal (CVSS 7.5) allowing authenticated read-only users to execute commands with root privileges.
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
Ubuntu snap-confine Flaw CVE-2026-8933 Gives Local Users Root on Default Desktop Installs
Cybersecurity researchers have disclosed a high-severity local privilege escalation (LPE) vulnerability in snap-confine, tracked as CVE-2026-8933 (CVSS score: 7.8), that allows an…
CVE-2026-8933: snap-confine Flaw in Ubuntu Desktop
A local privilege escalation vulnerability in snap-confine on Ubuntu Desktop, disclosed by Qualys. Allows local users to gain root on default installs.
CVE-2021-44731: Oh Snap! More Lemmings snap-confine Privilege Escalation
A local privilege escalation flaw in snap-confine's setup_private_mount() function, disclosed by Qualys in February 2022, allowing attackers to gain root privileges via…
CVE-2022-3328: snap-confine Race Condition Vulnerability
A high-severity race condition vulnerability in snap-confine, CVSS score 7.8, allowing local privilege escalation.
CVE-2026-3888: snap-confine Privilege Escalation Flaw
A high-severity vulnerability in snap-confine with CVSS score 7.8, enabling local privilege escalation.
Adobe Acrobat Chrome Extension Flaw (CVE-2026-48294) Enables Silent WhatsApp Data Theft
Cybersecurity researchers at Guardio Labs have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension, which has over…
CVE-2026-48294: Adobe Acrobat Chrome Extension UXSS Vulnerability
CVE-2026-48294 is a universal cross-site scripting (UXSS)-class cross-origin data disclosure vulnerability in the Adobe Acrobat Chrome extension (versions prior to and including…
Hackers Exploit Unpatched Windmill Path Traversal Flaw CVE-2026-29059 to Read Server Files
A high-severity path traversal vulnerability in the open-source developer platform Windmill, tracked as CVE-2026-29059 (CVSS 7.5), is under active exploitation. The flaw…
CVE-2026-29059: Windmill Path Traversal Vulnerability
A high-severity unauthenticated path traversal flaw in Windmill's get_log_file endpoint allows arbitrary file read. Exploitation can expose SUPERADMIN_SECRET leading to RCE. Patched…