tag
Local-Code-Execution
Vim Modeline `path` Option Backtick-Expansion Command Injection (CVE-2026-44656)
Vim's modeline processing allows a file to set the path option, which can itself contain a backtick ( ) expansion expression. When a user triggers path/file completion via the :find command and presses Tab, Vim evaluates the path option's embedded backtick…
Discord Desktop Client Uncontrolled Search Path Element / Local Code Execution (CVE-2026-0776)
CVE-2026-0776 is an Uncontrolled Search Path Element (CWE-427) issue in the Discord Desktop Client on Windows: under certain conditions the Electron/Node.js runtime resolves and loads native/JS modules from a filesystem location that a local, unprivileged…
objdump DLX ELF Backend Out-of-Bounds Write (Crash-to-Calc)
objdump -g (debug-info dumping) against a crafted ELF/DLX object file triggers an out-of-bounds write in the DLX ELF backend's relocation-processing code, writing outside the intended debug section buffer. The researcher shapes the crafted relocation data so…