Linux kernel Logitech HIDPP use-after-free allows local privilege escalation
ZDI rates CVE-2026-93826 at CVSS 7.8 and requires existing low-privileged code execution.
Stories per day · 30 days
3 RSS
Relatedkernel2use-after-free2zdi2android-tv1cve-2026-580941freebsd1hidpp1integer-overflow1linux-kernel1openbsd1tcl1toctou1
20 stories, newest first · one card per story
Stories tagged #local-privilege-escalation
Public root tool targets Tcl Android TV via CVE-2022-22706
A GitLab project posted to Hacker News claims autonomous root on Tcl Android TV using CVE-2022-22706.
OpenBSD 7.9 local root exploit chains old BSD bug with kernel flaw
Calif’s public chain bypasses KARL, SMAP, and SMEP; OpenBSD patched both issues in September via syspatch.
2
ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
ZDI disclosed FreeBSD kernel shared-memory TOCTOU bug CVE-2026-58094 enabling local privilege escalation.
USN-8879-1: Linux kernel (Oracle) vulnerabilities
Ubuntu's USN-8879-1 patches Oracle Linux kernels for an i.MX crash and an Arm TLB privilege flaw.
[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM
Input Leap through 3.0.3 lets a local Windows user run commands as SYSTEM via unauthenticated IPC.
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
Unpatched OnePlus flaws let a no-permission Android app gain root on OxygenOS phones, with no fix released.
Veeam Agent Flaw Actively Exploited to Gain SYSTEM Privileges on Windows
Public PoC for CVE-2026-32996 lets local users escalate to SYSTEM through Veeam Agent for Windows.
1
Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)
Chinese-speaking threat actor exploited a vulnerability in unpatched ZyXEL switches (CVE-2026-7273) affecting 996 devices across multiple countries; the exploit was contained in June 2026 and is now part of a broader…
10
Windows Exploitation Techniques: Dangling COM Object Registrations
Project Zero details patched Windows CVE-2026-66804, a privilege escalation via a dangling COM registration.
6
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Follow-up discussion on four Linux kernel local root vulnerabilities (DirtyAH6, PPPoEject, TUNderflow, DiagSpill) weighs per-module kernel packaging trade-offs.
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Follow-up on four Linux kernel local root flaws (DirtyAH6, PPPoEject, TUNderflow, DiagSpill), noting PPPoE is ubiquitous on ISP gateways.
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
oss-security follow-up on four Linux kernel local root vulnerabilities — DirtyAH6, PPPoEject, TUNderflow, DiagSpill — praising the advisory's disclosure quality.
A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Four local root privilege escalation vulnerabilities in the Linux kernel, aged 10-21 years, disclosed as CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, and CVE-2026-74469.
Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges
A public BrokenPipe PoC exploits a signature-coverage flaw in Steam's Windows service, letting unprivileged local users gain NT AUTHORITY\SYSTEM without a patch or CVE.
6
The skb that wasn't freed - the Fragnesia primitive via Open vSwitch
Doyensec details CVE-2026-90049 in Open vSwitch, enabling deterministic Linux kernel local privilege escalation on default major distribution installs.
ZDI-26-700: Linux Kernel QFQ Plus Scheduler Use-After-Free Local Privilege Escalation Vulnerability
ZDI discloses Linux Kernel QFQ Plus scheduler use-after-free (CVE-2026-22999, CVSS 7.8) enabling local privilege escalation on affected systems.
ZDI-26-554: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI advisory discloses Parallels RAS Client RDP backend service local privilege escalation (CVE-2026-13121, CVSS 7.8).
ZDI-26-530: SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability
ZDI advisory discloses SonicWall Email Security snmp command injection local privilege escalation (CVE-2026-66150, CVSS 7.8).
ZDI-26-539: (Pwn2Own) Microsoft Windows ipt.sys Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI advisory discloses Windows ipt.sys local privilege escalation (CVE-2026-65773, CVSS 7.8) demonstrated at Pwn2Own.