CVE-2026-35603: Anthropic Claude Code Windows Folder Trust Vulnerability
A vulnerability in Anthropic Claude Code (and other AI tools) allows a low-privileged attacker to drop configuration files in a trusted Windows…
Tag: privilege escalation
CVE-2026-36425: Vulnerable OPSWAT Driver Exploited in Spark RAT Campaign
CVE-2026-36425 is a vulnerability in the OPSWAT AppRemover driver (ardrv.sys) that is exploited via a bring your own vulnerable driver (BYOVD) technique…
GPUThor Rowhammer Attack Bypasses ECC on NVIDIA RTX A6000 to Achieve Host Root Access
Academic researchers at the University of Toronto have disclosed a new Rowhammer attack, dubbed GPUThor, that defeats error correction codes (ECC) on…
CVE-2026-61979: miniOrange SAML Privilege Escalation
CVE-2026-61979 is an unauthenticated privilege escalation vulnerability in the miniOrange SAML 2.0 Single Sign On plugin for WordPress. It stems from signature…
Attackers Exploit miniOrange SAML Flaws to Gain WordPress Admin Access
Threat actors are actively exploiting two critical authentication bypass vulnerabilities in the Xecurify miniOrange SAML 2.0 Single Sign On plugin for WordPress.…
CVE-2021-24092: Privilege Escalation in Microsoft Defender’s BTR.sys
CVE-2021-24092 is a privilege escalation vulnerability in Microsoft Defender's BTR.sys driver, disclosed by SentinelLabs researcher Kasif Dekel in February 2021. It allowed…
Windows Ancillary Function Driver for WinSock: Kernel Component
The Windows Ancillary Function Driver for WinSock is a kernel component in Windows. It was affected by CVE-2026-68820, a privilege escalation vulnerability…
CVE-2025-31702: Dahua Privilege Escalation
CVE-2025-31702 is a privilege-escalation flaw in Dahua products that requires previously obtained normal-user credentials. It was associated with the recovered tooling in…
Unisoc VoLTE Exploit Chain Achieves Full Android Kernel Access
Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc…
CVE-2026-43760: Access Issue in macOS Screen Sharing
CVE-2026-43760 is an access issue in macOS Screen Sharing with a CVSS score of 8.6, allowing an app to access user-sensitive data.…