Microsoft reports 59 Linux kernel bugs and 33 CVEs from AI scans
Eight CVEs had lab-confirmed local root exploits; fixes for 38 reports are in mainline, and bugs averaged 8.1 years old.
Stories per day · 30 days
20 RSS
Relatedlinux-kernel13zdi13local12php2shell11linux10webshell10xorg9kernel8fortinet7heap-overflow7tailscale7windows7active-directory6cisa6headscale6kev6pan-os6ssh6
370 stories, newest first · one card per story
Stories tagged #privilege-escalation
Zoom patches critical unauthenticated privilege escalation in Workplace for Windows
CVE-2026-108186 (CVSS 9.6) affects 7.1.0 before 7.1.8; CVE-2026-108187 (CVSS 8.1) affects builds before 7.1.5.
Researcher posts unconfirmed Windows SignDrop CLFS privilege PoC
The GitHub proof of concept claims local user-to-SYSTEM escalation, with no CVE or Microsoft confirmation.
Fortinet patches FortiClient flaw that runs code from malicious sites
CVE-2026-121529 affects FortiClient 7.2 and 7.4 branches; Fortinet says exploitation is not known.
N-able ships N-central hotfix after flaws force hosted shutdown
Build 2026.4.1.26 fixes seven CVEs; public Able2Shell proof-of-concept drew scanning, and hosted service returned November 10.
N-able ships N-central emergency fix after 33 exploits published
Hosted N-central was taken offline worldwide, and on-premises customers were told to shut servers down until 2026.4 HF2.
CISA adds IBM Aspera Faspex flaw to KEV (CVE-2026-123218)
An authenticated user can craft a message to bypass authorization and escalate privileges; action is due November 12.
FortiManager template injection can grant super admin on FortiGates
Fortinet rates the command-injection path CVSS 8.4; the notice does not name versions, fixes or active attacks.
FortiManager flaw lets admin users gain root over HTTP
The CVSS 8.2 issue requires an authenticated administrator; Fortinet does not list versions or a fix.
FortiMail OS command injection lets an admin run code as root
The attacker must already be an administrator with system-time read-write access; CVSSv3 is 7.2.
X.Org Server ProcDRI2GetBuffers overflow allows local privilege escalation
ZDI rates CVE-2026-50264 at 7.8; exploitation needs prior low-privileged code execution.
Notepad++ 8.9.9 fixes six local flaws, including privilege escalation
Issues affect 8.9.8 and earlier; CVEs are unassigned, and MIME Tools 3.2 fixes decoding flaws through 3.1.
1
Critical Terminal2Shell flaw grants instant shell on all OS
Design flaw in every terminal emulator on macOS Linux Windows and more allows attackers to gain instant shell with full user privileges with no patches available.
38
Home Assistant Green stores credentials in cleartext, enabling local privilege escalation
Attackers need low-privileged code in a container first; ZDI rates CVE-2026-91131 at CVSS 8.8.
Conflux Prevents Privilege Escalation in LLM Agents
Conflux is a kernel-based defense using principal contexts and ITES to enforce authority from all influencing principals in LLM agents.
OpenAI AI uncovers 948 Linux kernel privilege escalation vulnerabilities
AI agents validated 948 Linux kernel flaws in 30 hours, with patches starting within 10 days and bounties valued at $18.9M-$66.3M.
2
Debian and Ubuntu APT Vulnerability Allows Root Code Execution (CVE-2026-109518)
CVE-2026-109518 in APT lets on-path attackers install malicious packages with root privileges via HTTP redirects and retry mishandling.
Linux Kernel Vulnerability Allows Unprivileged Root Access
The flaw in the virt_wifi driver enables unprivileged local privilege escalation to root on default Fedora 44 Server.
3
Quest Foglight for Databases Hardcoded Encryption Key Allows Local Privilege Escalation
Local attackers can escalate privileges after obtaining low-privileged code execution (CVE-2026-92199)
Apache Syncope AuthProfile value escalation via self-service update (CVE-2026-110535)
Non-admin users can configure impersonation for WA surrogate authentication through self-updates.
Researchers Release POC for Windows WinSock Ancillary Privilege Escalation Vulnerability
Public POC for CVE-2023-21768 enables local attackers to escalate to SYSTEM privileges on Windows 11 22H2 through the afd.sys driver.
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
Chained zero-days in Ivanti Connect Secure VPN enabled root access and data exfiltration; Volexity attributes activity to UTA0576.
2
Hackers weaponize ARTEX AI agents for network intrusions
Attackers use autonomous ARTEX AI agents to automate intrusions, privilege escalation, and data theft across multiple organizations.
CISA adds exploited Ivanti Connect Secure flaws to its KEV catalog
Agencies must fix CVE-2026-111357 by November 2 and CVE-2026-118527 by November 13; UTA0576 chained them with CVE-2026-104935 for root access.
6