CVE-2026-43760: Access Issue in macOS Screen Sharing
CVE-2026-43760 is an access issue in macOS Screen Sharing with a CVSS score of 8.6, allowing an app to access user-sensitive data.…
Tag: privilege escalation
AFD.sys: Windows Kernel Driver Targeted by Exploit
AFD.sys is a Windows kernel driver that provides Winsock functionality. It contains the privilege escalation vulnerability CVE-2026-68820, which was exploited by Lazarus…
Adobe Patches Critical ColdFusion and Campaign Classic Flaws with Multiple CVSS 10.0 Ratings
Adobe has released security updates addressing multiple critical vulnerabilities in ColdFusion, Commerce, and Campaign Classic. The most severe include three CVSS 10.0…
CVE-2026-71362: Privilege Escalation in Adobe Commerce
A CVSS 9.1 incorrect authorization vulnerability in Adobe Commerce that could lead to privilege escalation.
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
Security researcher Chaotic Eclipse (also known as INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day…
CVE-2026-62832 (LegacyHive): Windows User Profile Service Privilege Escalation
CVE-2026-62832 is a Windows User Profile Service privilege escalation vulnerability disclosed by Chaotic Eclipse as LegacyHive. It involves improper link resolution before…
CVE-2016-5195: Dirty COW Privilege Escalation
CVE-2016-5195, known as Dirty COW, is a Linux kernel privilege escalation vulnerability that allows local users to gain write access to read-only…
Microsoft August 2026 Patch Tuesday: 398 Flaws Fixed, Windows Driver Zero-Day Under Active Attack
Microsoft released its August 2026 Patch Tuesday updates, addressing a total of 398 vulnerabilities, with 62 rated Critical. The most urgent fix…
Windows 11 USB Auto-Install Flaw Enables SYSTEM Takeover via PnP Abuse
Security researchers have demonstrated a new attack technique that abuses Windows Plug and Play (PnP) auto-install to achieve full SYSTEM privileges on…
CVE-2023-32349: Teltonika RUT Series Privilege Escalation Vulnerability
CVE-2023-32349 is a vulnerability in Teltonika RUT series routers that requires existing privileges on the device. It was listed in CISA's 2023…