773 PoCs | 119 CISA KEV

tag

Local-Privilege-Escalation

Windows Server 2025 Local NTLM Reflection LPE via SMB Arbitrary Port + PetitPotam (CVE-2026-24294)

CVE-2026-24294 (Microsoft Security Response Center) network Patched

CVE-2026-24294networkCRITICALPatched2026-07-05snapd snap-confine / systemd-tmpfiles Race Condition LPE (CVE-2026-3888)

CVE-2026-3888 binary Patched

CVE-2026-3888binaryHIGHPatched2026-07-05FreeBSD OSS /dev/dsp Stale Kernel-Stack Buffer Local Privilege Escalation (CVE-2026-49417)

CVE-2026-49417 binary Unverified

CVE-2026-49417binaryHIGHUnverified2026-07-05FreeBSD Linuxulator AT_SECURE=0 Local Privilege Escalation via LD_PRELOAD (CVE-2026-49413)

CVE-2026-49413 binary Unverified

CVE-2026-49413binaryHIGHUnverified2026-07-05Fortinet FortiClientLinux VPN Config Symlink/Shared-Object Loading LPE — CVE-2026-24018

CVE-2026-24018 binary Unverified

CVE-2026-24018binaryHIGHUnverified2026-07-05ASUS DriverHub Update TOCTOU Local Privilege Escalation — CVE-2026-1880

CVE-2026-1880 binary Patched

CVE-2026-1880binaryMEDIUMPatched2026-07-05Apache HTTP Server mod_rewrite/mod_setenvif/mod_proxy_fcgi ap_expr Local File Read — CVE-2026-24072

CVE-2026-24072 web Patched

CVE-2026-24072webMEDIUMPatched2026-07-05System Informer phsvc Trusted-Host Confused Deputy LPE

None assigned as of 2026-07-03 binary Unverified

None assigned as of 2026-07-03binaryHIGHUnverified2026-07-03LiteSpeed User-End cPanel Plugin Local Privilege Escalation (CVE-2026-48172) KEV EPSS 19%

CVE-2026-48172 web Unverified

CVE-2026-48172webHIGHUnverified2026-05-30