LPE

Linux XFRM nat_keepalive Double-Free LPE (CVE-2026-72137) newCVE-2026-72137binaryHIGH 7.8Unverified2026-09-04Linux SCTP Stream Rollback UAF LPE (CVE-2026-52929) newCVE-2026-52929binaryHIGH 7.8Unverified2026-09-04Linux SCTP Stale COOKIE-ECHO UAF LPE (CVE-2026-52924) newCVE-2026-52924binaryCRITICAL 9.8Unverified2026-09-04Linux SCTP auth_enable Sysctl UAF LPE (CVE-2026-68162) newCVE-2026-68162binaryHIGH 7.8Unverified2026-09-04Linux Open vSwitch Tunnel Netdev UAF LPE (CVE-2026-31678) newCVE-2026-31678binaryHIGH 7.8Unverified2026-09-04Linux Netfilter nf_queue Bridge Device UAF LPE (CVE-2026-72255) newCVE-2026-72255binaryHIGH 7.8Unverified2026-09-04Linux IPVS One-Packet Flag Propagation UAF LPE (CVE-2026-80714) newCVE-2026-80714binaryCRITICAL 9.8Unverified2026-09-04Linux IPv6 fib6 Rule Suppression UAF LPE (CVE-2026-74581) newCVE-2026-74581binaryHIGH 7.8Unverified2026-09-04Linux io_uring Poll Signed Comparison LPE (CVE-2026-52933) newCVE-2026-52933binaryHIGH 7.8Unverified2026-09-04Linux Bridge Fast-Leave Port Deletion UAF LPE (CVE-2026-74480) newCVE-2026-74480binaryCRITICAL 9.8Unverified2026-09-04Linux Netfilter xt_IDLETIMER UAF LPE (CVE-2026-23274) newCVE-2026-23274binaryHIGH 7.8Unverified2026-09-03Linux Netfilter nf_queue UAF LPE (CVE-2026-52912) newCVE-2026-52912binaryHIGH 7.8Unverified2026-09-03Linux MPLS Subsystem UAF LPE (CVE-2026-43042) newCVE-2026-43042binaryHIGH 7.1Unverified2026-09-03Linux Kernel posix-cpu-timers Use-After-Free LPE (CVE-2026-64560) newCVE-2026-64560binaryHIGH 7.8Unverified2026-09-03Linux Kernel IPC msg_msg Use-After-Free LPE (CVE-2026-52923) newCVE-2026-52923binaryHIGH 7.8Unverified2026-09-03Linux Kernel eventpoll Use-After-Free LPE (CVE-2026-43074) newCVE-2026-43074binaryHIGH 7.8Unverified2026-09-03Linux IPv6 RPL Routing UAF LPE (CVE-2026-43501) newCVE-2026-43501binaryCRITICAL 9.8Unverified2026-09-03Windows Media Player DLL Hijack -- Local Privilege Escalation (CVE-2026-21508) newCVE-2026-21508binaryHIGH 7.8Patched2026-08-16Ubuntu Linux Kernel PPPoL2TP Use-After-Free Local Privilege Escalation (CVE-2026-68398) newCVE-2026-68398binaryHIGH 7.8Patched2026-08-16Linux nf_tables Catchall Set Element UAF -- Local Privilege Escalation (CVE-2026-23111) newCVE-2026-23111binaryHIGH 7.8Patched2026-08-16Linux AF_UNIX GC vs MSG_PEEK Use-After-Free Container Escape (CVE-2026-53361) newCVE-2026-53361binaryCRITICAL 9.8Patched2026-08-16Linux Kernel — SCTPhantom: SCTP ASCONF DEL-IP Use-After-Free Local Privilege Escalation (CVE-2026-64564) newCVE-2026-64564binaryHIGH 7.8Patched2026-08-15Linux Kernel — qdisc Rate-Table Race Condition Local Privilege Escalation (CVE-2026-68138) newCVE-2026-68138binaryHIGH 7.8Patched2026-08-15Linux Kernel — OVSwrap: Open vSwitch Conntrack Local Privilege Escalation (CVE-2026-64531) newCVE-2026-64531binaryHIGH 7.8Patched2026-08-15Windows Defender — ShieldBreak: RoguePlanet (CVE-2026-50656) Patch Bypass via Cloud Files Rehydration + Object Manager Symlinks new EPSS 11%Bypass of CVE-2026-50656binaryHIGH 7.8Unpatched2026-08-11Barrier 2.4.0 — barrierd.exe Unauthenticated IPC → SYSTEM Privilege Escalation (NotCVE-2026-0010) newNotCVE-2026-0010binaryHIGHUnverified2026-08-01Windows WalletService Known-Folder Redirection → ESE Persisted-Callback DLL Load Local Privilege Escalation (CVE-2026-49176) newCVE-2026-49176binaryHIGH 7.8Patched2026-07-27LegacyHive - Windows user profile service arbitrary hive load elevation of privileges vulnerability new—binaryHIGHPatched2026-07-19Linux Kernel rtmutex Priority-Inheritance Stack-UAF — "GhostLock" (CVE-2026-43499, Nebula Security weaponized variant) newCVE-2026-43499binaryHIGH 7.8Patched2026-07-08Windows pstrip64.sys BYOVD Physical Memory Local Privilege Escalation — CVE-2026-29923 newCVE-2026-29923binaryCRITICALUnverified2026-07-05Windows Kernel Local Privilege Escalation via SeDebugPrivilege Bit Corruption (CVE-2026-40369) newCVE-2026-40369binaryHIGHUnverified2026-07-05Windows Error Reporting Service ALPC Local Privilege Escalation (CVE-2026-20817) newCVE-2026-20817binaryHIGHUnverified2026-07-05Samsung SveService Native Out-of-Bounds Write (CVE-2026-21018) newCVE-2026-21018binaryHIGHUnverified2026-07-05Portwell Engineering Toolkits Driver Arbitrary Physical Memory R/W LPE (CVE-2026-3437) newCVE-2026-3437binaryHIGHUnverified2026-07-05PinTheft: RDS zcopy Refcount-Steal Double-Free LPE — Pure NASM Rewrite (CVE-2026-43494) newCVE-2026-43494binaryHIGHPatched2026-07-05PackageKit TOCTOU Local Privilege Escalation (CVE-2026-41651) newCVE-2026-41651binaryHIGHPatched2026-07-05MiniTool pwdrvio.sys Kernel Write-What-Where — Local Privilege Escalation Primitive (CVE-2026-36981) newCVE-2026-36981binaryHIGHPatched2026-07-05Microsoft Defender Link Following Local Privilege Escalation (CVE-2026-41091) new KEVCVE-2026-41091binaryHIGH 7.8Unpatched2026-07-05Linux Kernel Futex-PI rtmutex remove_waiter() Use-After-Free (CVE-2026-43499) newCVE-2026-43499binaryHIGH 7.8Patched2026-07-05Linux FUSE Readdir Cache Out-of-Bounds Write to Root LPE — CVE-2026-31694 newCVE-2026-31694binaryHIGHPatched2026-07-05Linux BPF Verifier Scalar-Forking Soundness Bug to Container Escape — CVE-2026-31413 newCVE-2026-31413binaryCRITICALPatched2026-07-05GNU inetutils telnetd Local Privilege Escalation via NEW-ENVIRON Injection — CVE-2026-28372 newCVE-2026-28372binaryHIGH 7.4Patched2026-07-05FreeBSD setcred(2) Kernel Stack Buffer Overflow — Local Privilege Escalation (CVE-2026-45250) newCVE-2026-45250binaryCRITICALUnverified2026-07-05FreeBSD exec_args_adjust_args() Out-of-Bounds memmove — Local Privilege Escalation via sshd Race (CVE-2026-7270) newCVE-2026-7270binaryCRITICALUnverified2026-07-05FreeBSD /dev/dsp (OSS) Negative-Offset mmap Kernel Memory Corruption LPE (CVE-2026-45258) newCVE-2026-45258binaryCRITICALUnverified2026-07-05DirtyDecrypt-Go — RxRPC rxgk Page-Cache Overwrite LPE (Go Port) — CVE-2026-31635 newCVE-2026-31635binaryHIGHPatched2026-07-05ASUS DriverHub Update TOCTOU Local Privilege Escalation — CVE-2026-1880 newCVE-2026-1880binaryMEDIUMPatched2026-07-05System Informer phsvc Trusted-Host Confused Deputy LPE newNone assigned as of 2026-07-03binaryHIGHUnverified2026-07-03AnyDesk Printer Pipe COM Impersonation Local Privilege Escalation newNone assigned as of 2026-07-03binaryHIGHUnverified2026-07-03Linux Kernel act_pedit Partial COW Page-Cache LPE (CVE-2026-46331) newCVE-2026-46331binaryHIGH 7.8Patched2026-06-30Claude Desktop Cowork VM Image Integrity Bypass / Local Persistence (CVE-2026-7574) newCVE-2026-7574binaryHIGH 8.7Unverified2026-06-30Windows CTFMON Arbitrary Section Object EoP — GreenPlasma (CVE-2026-45586) newCVE-2026-45586binaryHIGH 7.8Patched2026-06-28DirtyClone — Linux Kernel LPE via Cloned Packet Page-Cache Overwrite (CVE-2026-43503) newCVE-2026-43503binaryHIGH 8.8Patched2026-06-28CVE-2026-50656 RoguePlanet — Safe Vulnerability Checker (Resurface) new EPSS 11%CVE-2026-50656binaryHIGH 7.8Patched2026-06-26RoguePlanet — Windows Defender LPE via ISO Mount + Task Scheduler Race Condition new EPSS 11%CVE-2026-50656binaryHIGH 7.8Unpatched2026-06-10ssh-keysign-pwn: pidfd_getfd FD Theft via mm-NULL Exit Window (CVE-2026-46333) newCVE-2026-46333binaryHIGHPatched2026-06-05PinTheft: RDS Double-Free → LPE new—binaryHIGHUnverified2026-05-20TossUp — TerraMaster TOS Unauthenticated Redis Root RCE + NFS LPE newN/AnetworkCRITICALUnpatched2026-05-18DirtyDecrypt / DirtyCBC — rxgk Page-Cache Write (Dirty Pipe Variant) newN/AbinaryHIGHUnverified2026-05-18Linux vsock Use-After-Free VM Escape (CVE-2025-21756) newCVE-2025-21756binaryHIGH 7.8Patched2026-05-17Linux nf_tables Use-After-Free Local Privilege Escalation (CVE-2024-1086) new KEV RW EPSS 28%CVE-2024-1086binaryHIGH 7.8Patched2026-05-17Copy Fail Linux Kernel Local Privilege Escalation (CVE-2026-31431) new KEV EPSS 100%CVE-2026-31431binaryHIGHPatched2026-05-17RedSun Privileged File Write (CVE-2026-33825) new KEV RWCVE-2026-33825binaryHIGH 7.8Patched2026-05-15MiniPlasma - Windows Cloud Files Mini Filter Driver LPE (CVE-2020-17103) new EPSS 27%CVE-2020-17103binaryHIGH 7.8Patched2026-05-15CVE-2024-21338 — Local Privilege Escalation from Admin to Kernel new KEV RW EPSS 60%CVE-2024-21338binaryHIGH 7.8Patched2026-05-15BlueHammer Defender Local Privilege Escalation (CVE-2026-33825) new KEV RWCVE-2026-33825binaryHIGH 7.8Patched2026-05-15Linux XFRM ESP-in-TCP Local Privilege Escalation (Fragnesia) newCVE-2026-46300binaryHIGH 7.8Patched2026-05-14Dirty Frag: Linux XFRM/RxRPC Page Cache Write Chain LPE new EPSS 93%CVE-2026-43500, CVE-2026-43284binaryCRITICAL 7.8Patched2026-05-14