» Tag
privilege-escalation
6 postsRefluXFS: XFS reflink race lets Linux users escalate to root (CVE-2026-64600)
Qualys details RefluXFS (CVE-2026-64600), an XFS reflink race enabling local privilege escalation to root on default RHEL, Rocky, and Fedora Server installs.
Linux Kernel UDP Corking Flaw Enables Local Privilege Escalation
Two Linux kernel CVEs (2026-53362, 2026-53366) expose a heap OOB write via UDP MSG_SPLICE_PAGES corking, enabling local privilege escalation.
MongoDB BSON Symbol Type Bypasses Authorization Check (CVE-2026-18690)
MongoDB CVE-2026-18690: a BSON symbol-typed collection name bypasses authorization checks, letting limited users reach protected system collections.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comAWS EKS Privilege Escalation: Pod Metadata to Cluster-Admin
How a compromised EKS pod can escalate to cluster-admin via EC2 metadata and node tokens, plus a persistent aws-auth backdoor technique.
OVSwrap (CVE-2026-64531): AI-Assisted Discovery of a Linux Kernel LPE
OVSwrap (CVE-2026-64531): an AI-assisted discovery of a Linux kernel Open vSwitch LPE caused by a 16-bit nested action length wraparound.
Windows Privilege Abuse: The Shortcut to SYSTEM Access
Exploring how Windows privileges like SeImpersonatePrivilege are weaponized into SYSTEM access via Potato attacks, and why architectural defenses matter.