Threats tagged 'local'

177 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	–		https://wordpress.org/plugins/prodigy-commerce · Prodigy Commerce 3.3.0 · Local File Inclusion Medium2026-05-29Exploit-DB RSS Feed Prodigy Commerce 3.3.0 - Local File Inclusion Exploit https://prodigycommerce.com #local #web #rce	Exploit-DB RSS Feed	2026-05-29
Medium	–	EPSS 1.8%	CVE-2026-46522https://imagemagick.org/download · ImageMagick · Infinite Loop in the MIFF decoder can lead to CPU exhaustion MediumEPSS 1.8%2026-05-29Exploit-DB RSS FeedCVE-2026-46522 ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion EPSS 1.8%Exploit #local #exploit	Exploit-DB RSS Feed	2026-05-29
Not rated	–		Analysis of a Year of Files Uploaded to DShield Sensors, (Wed, May 27th) 2026-05-28SANS ISC Handlers Diary Using the data collected over the past year and using Kibana these two ES\|QL query to summarize the data, this shows the list of the most uploaded threat to two DShield sensors (local and cloud) over the past year. I have sorted the activity by months that shows the evolution of files uploaded to the sensors each month. The activity peaked during the winter months (Dec 2025 - Feb 2026) and started decreasing in March 2026 for each sensor. Analysis #local	SANS ISC Handlers Diary	2026-05-28
Medium	–		Realtek rtl819x · Local Privilege Medium2026-05-27Exploit-DB RSS Feed Realtek rtl819x - Local Privilege Exploit #local #exploit	Exploit-DB RSS Feed	2026-05-27
High	7.8	KEVEPSS 16%	CVE-2026-46300Fragnesia (CVE-2026-46300): Frequently asked questions about new Linux Kernel XFRM ESP-in-TCP privilege escalation High7.8KEVEPSS 16%2026-05-26Tenable ResearchCVE-2026-46300 CVE-2026-46300, known as Fragnesia, is a Linux kernel vulnerability that enables an unprivileged local attacker to escalate privileges to root on the host. It specifically affects GKE Standard clusters running Ubuntu nodes, while GKE Standard clusters with Container-Optimized OS nodes, GKE Autopilot, and GKE Sandbox are not impacted. Upstream kernel patches have recently been released but are still being integrated into GKE releases. Partial mitigations include running workloads as non-root, using seccomp profiles set to RuntimeDefault, and disabling privilege escalation in container security contexts. Patch versions for other affected environments like VMware GDC and GKE on AWS/Azure are pending. The vulnerability is rated as high severity due to the potential for container breakout and host compromise. KEVEPSS 16%Report on CVE-2026-46300 Vulnerability CWE-456 #local #rce	Tenable Research	2026-05-26
High	–		Linux Kernel 6.8 · Local Privilege Escalation High2026-05-26Exploit-DB RSS Feed Linux Kernel 6.8 - Local Privilege Escalation Exploit #linux #local #exploit	Exploit-DB RSS Feed	2026-05-26
Not rated	–		Laravel Lang packages hijacked to deploy credential-stealing malware 2026-05-23Bleeping Computer A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through Composer packages. [...] Malware #local	Bleeping Computer	2026-05-23
Medium	–		https://support.lenovo.com/es/es/solutions/legion_space · Lenovo LegionSpace 1.7.11.2 · 'DAService' Unquoted Service Path Medium2026-05-21Exploit-DB RSS Feed Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path Exploit #local #exploit	Exploit-DB RSS Feed	2026-05-21
Medium	–		PoC Released for DirtyDecrypt Linux Kernel Vulnerability Medium2026-05-19SecurityWeek Patched in April, the underlying vulnerability allows local attackers to elevate their privileges to root. The post PoC Released for DirtyDecrypt Linux Kernel Vulnerability appeared first on SecurityWeek . Exploit #linux #local	SecurityWeek	2026-05-19
Critical	–		Remote Sunrise Helper for Windows 2026.14 · Remote Code Execution Critical2026-05-15Exploit-DB RSS Feed Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution Exploit #windows #remote #local	Exploit-DB RSS Feed	2026-05-15
Medium	–		Remote Sunrise Helper for Windows 2026.14 · Unauthenticated File/Directory Listing Medium2026-05-15Exploit-DB RSS Feed Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing Exploit #windows #remote #local	Exploit-DB RSS Feed	2026-05-15
Medium	–		Windows Snipping Tool · NTLMv2 Hash Hijack Medium2026-05-15Exploit-DB RSS Feed Windows Snipping Tool - NTLMv2 Hash Hijack Exploit #windows #local #exploit	Exploit-DB RSS Feed	2026-05-15
High	–		Another Universal Linux Local Privilege Escalation (LPE) Vulnerability: Dirty Frag, (Fri, May 8th) High2026-05-08SANS ISC Handlers Diary Less than two weeks after the public disclosure of the Copy Fail vulnerability (CVE-2026-31431), another local privilege escalation (LPE) vulnerability in the Linux kernel has been revealed. Referred to as "Dirty Frag," this vulnerability was discovered and reported by Hyunwoo Kim (@v4bel) [1]. In this diary, I will provide a brief background on Dirty Frag, and discuss its relationship to Copy Fail. I will then discuss how to mitigate Dirty Frag and outline recommended next steps for system owners. Vulnerability #linux #local	SANS ISC Handlers Diary	2026-05-08
Medium	–		NocoBase 2.0.27 · VM Sandbox Escape Medium2026-05-07Exploit-DB RSS Feed NocoBase 2.0.27 - VM Sandbox Escape Vulnerability #local #exploit	Exploit-DB RSS Feed	2026-05-07
High	–		Windows 11 24H2 · Local Privilege Escalation High2026-05-04Exploit-DB RSS Feed Windows 11 24H2 - Local Privilege Escalation Exploit #windows #local #exploit	Exploit-DB RSS Feed	2026-05-04
High	–		Linux nf_tables 6.19.3 · Local Privilege Escalation High2026-05-04Exploit-DB RSS Feed Linux nf_tables 6.19.3 - Local Privilege Escalation Exploit #linux #local #exploit	Exploit-DB RSS Feed	2026-05-04
High	–		Linux Kernel proc_readdir_de() 6.18-rc5 - Local Privilege Escalation High2026-05-04Exploit-DB RSS Feed Linux Kernel proc_readdir_de() 6.18-rc5 - Local Privilege Escalation Exploit #linux #local #exploit	Exploit-DB RSS Feed	2026-05-04
Medium	–		Windows 11 23H2 · Denial of Service (DoS) Medium2026-04-30Exploit-DB RSS Feed Windows 11 23H2 - Denial of Service (DoS) Exploit #windows #local #dos	Exploit-DB RSS Feed	2026-04-30
Medium	–		Google Chrome 145.0.7632.75 · CSSFontFeatureValuesMap Medium2026-04-30Exploit-DB RSS Feed Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap Exploit #local #exploit	Exploit-DB RSS Feed	2026-04-30
Medium	–		Windows 11 25H2 · Heap Overflow Medium2026-04-30Exploit-DB RSS Feed Windows 11 25H2 - Heap Overflow Exploit #windows #local #exploit	Exploit-DB RSS Feed	2026-04-30

Page 5 of 9