35
35
USN-8762-1: polkit vulnerability
Ubuntu warns polkit mishandles cookie input, letting a local attacker crash the daemon or possibly execute arbitrary code.
Ubuntu Security Notice USN-8762-1 addresses a vulnerability in polkit stemming from incorrect handling of cookie input. A local attacker could exploit the flaw to cause polkit to crash, producing a denial of service, or potentially execute arbitrary code. The notice indicates exploitation requires local access to the affected system.
28
50
35
35
Week in review: PolKit vulnerability, fake tax apps pushing malware, EU's bug bounty for open source
60
60
60
42
60
35
42
50
60
35
CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalog
60
CISA Warns of Active Exploitation of 'PwnKit' Linux Vulnerability in the Wild
60
60
42
Linux Detection Engineering - Local Privilege Escalation
Elastic details a layered detection framework for Linux local privilege escalation, covering 2026's copy-on-write bug wave and LLM-assisted discovery.
Elastic Security Labs describes how most Linux local privilege escalations share a common host flow — an unprivileged process launched from a writable path becoming root — and proposes layered detections combining general outcome-based rules with per-technique rules in Elastic Defend and Auditd. It tracks 13 recent LPE disclosures, seven of which share a copy-on-write/zero-copy bug class, including Copy Fail, DirtyFrag, Fragnesia, DirtyDecrypt, DirtyClone, pedit COW, and RefluXFS. Qualys attributes RefluXFS to an LLM-assisted research effort with Anthropic using Claude Mythos Preview, and another bug is credited to an LLM-assisted workflow. Detection and endpoint rules are published in Elastic's detection-rules and protections-artifacts repositories.
48
July 2026 CVE Landscape
60
60
30
60
47
50