AFD.sys: Windows Kernel Driver Targeted by Exploit
AFD.sys is a Windows kernel driver that provides Winsock functionality. It contains the privilege escalation vulnerability CVE-2026-68820, which was exploited by Lazarus…
Tag: privilege escalation
Adobe Patches Critical ColdFusion and Campaign Classic Flaws with Multiple CVSS 10.0 Ratings
Adobe has released security updates addressing multiple critical vulnerabilities in ColdFusion, Commerce, and Campaign Classic. The most severe include three CVSS 10.0…
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
Security researcher Chaotic Eclipse (also known as INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day…
CVE-2026-62832 (LegacyHive): Windows User Profile Service Privilege Escalation
CVE-2026-62832 is a Windows User Profile Service privilege escalation vulnerability disclosed by Chaotic Eclipse as LegacyHive. It involves improper link resolution before…
CVE-2016-5195: Dirty COW Privilege Escalation
CVE-2016-5195, known as Dirty COW, is a Linux kernel privilege escalation vulnerability that allows local users to gain write access to read-only…
Microsoft August 2026 Patch Tuesday: 398 Flaws Fixed, Windows Driver Zero-Day Under Active Attack
Microsoft released its August 2026 Patch Tuesday updates, addressing a total of 398 vulnerabilities, with 62 rated Critical. The most urgent fix…
Windows 11 USB Auto-Install Flaw Enables SYSTEM Takeover via PnP Abuse
Security researchers have demonstrated a new attack technique that abuses Windows Plug and Play (PnP) auto-install to achieve full SYSTEM privileges on…
CVE-2023-32349: Teltonika RUT Series Privilege Escalation Vulnerability
CVE-2023-32349 is a vulnerability in Teltonika RUT series routers that requires existing privileges on the device. It was listed in CISA's 2023…
CVE-2023-32350: Teltonika RUT Series Privilege Escalation Vulnerability
CVE-2023-32350 is another Teltonika RUT series vulnerability that requires existing privileges. It was part of the same CISA advisory and is considered…
18-Year-Old Linux SCTP Flaw CVE-2026-64564 Could Let Local Users Gain Root and Escape Containers
A use-after-free vulnerability in Linux's SCTP networking code, tracked as CVE-2026-64564 and named SCTPhantom, could allow local users to gain root privileges…