CVE Vulnerability Advisory Database

[Affected Scope] Microsoft Windows operating systems utilizing the Windows Update Stack

[Impact] A local authorized attacker can exploit improper link resolution to elevate privileges to SYSTEM, leading to complete system compromise

[Mitigation] Apply the official Microsoft security updates immediately, or restrict local symbolic link creation privileges as a temporary mitigation

[Affected Scope] Windows operating system kernel components and environments utilizing shared resources

[Impact] An authorized local attacker can trigger a race condition to cause kernel memory corruption, leading to local privilege escalation (LPE) to SYSTEM level

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local access privileges on unpatched systems

[Affected Scope] Windows and Windows Server systems running the Remote Access Connection Manager (RasMan) service

[Impact] An authorized local attacker can elevate privileges to SYSTEM, gaining full administrative control over the affected host

[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the RasMan service as a temporary workaround

[Affected Scope] All systems running Sudo versions prior to 1.9.17p1

[Impact] A local attacker can exploit the '--chroot' option to force Sudo to load a user-controlled nsswitch.conf file, leading to full root privilege escalation

[Mitigation] Immediately upgrade Sudo to version 1.9.17p1 or later, or restrict the use of the chroot option via sudoers configuration

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server

[Impact] A local attacker with low privileges can bypass security boundaries via RPC interfaces to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the Microsoft November 2024 Security Update and restrict local user privileges

[Affected Scope] Windows 10, 11, and Windows Server 2008 through 2022 environments

[Impact] A local attacker with low privileges can exploit a race condition to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the Microsoft August 2024 security updates and restrict local access on unpatched systems

[Affected Scope] Most major versions of Windows operating systems, including Windows 10, 11, and Windows Server 2008 through 2022

[Impact] A local authenticated attacker with low privileges can manipulate file system links to execute arbitrary code with SYSTEM privileges, leading to full system compromise

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft, or temporarily disable the WER service and restrict file link creation privileges

[Affected Scope] Systems and container environments utilizing the Linux kernel OverlayFS subsystem

[Impact] A local attacker can escalate privileges to root by copying a setuid/capable file from a nosuid mount into another mount

[Mitigation] Apply the latest kernel security patches from your distribution or restrict unprivileged user namespaces as a temporary workaround

[Affected Scope] Systems and network devices running vulnerable versions of Cisco SD-WAN Software CLI

[Impact] An authenticated, local attacker can execute arbitrary commands with root privileges by running a maliciously crafted command

[Mitigation] Apply the official software updates provided by Cisco immediately, as there are no viable workarounds

[Affected Scope] Major Linux distributions running polkit versions 0.113 through 0.118

[Impact] Unprivileged local attackers can bypass D-Bus credential checks to escalate privileges to root and create unauthorized administrator accounts

[Mitigation] Immediately update the polkit package to the patched version using the system package manager

[Affected Scope] Ubuntu Linux kernel versions with unprivileged user namespaces and OverlayFS mounting enabled

[Impact] A local unprivileged attacker can exploit improper file capability validation to gain full root privileges on the host

[Mitigation] Upgrade to the latest patched Ubuntu kernel and reboot, or temporarily disable unprivileged user namespaces

[Affected Scope] Linux kernel versions 2.6.x, 3.10.x, and 4.14.x, primarily affecting Red Hat Enterprise Linux and derivative distributions.

[Impact] An unprivileged local attacker can exploit this vulnerability via SUID binaries to trigger an integer overflow, achieving full root-level privilege escalation.

[Mitigation] Apply the official vendor kernel patches immediately and reboot the system, or implement temporary SUID restrictions and SystemTap mitigations.

[Affected Scope] Android devices powered by Qualcomm MSM chipsets running Linux kernel versions 2.6.x and 3.x

[Impact] Local attackers can exploit the /dev/msm_acdb device node to trigger a stack-based buffer overflow, leading to local privilege escalation (LPE) to root

[Mitigation] Apply official kernel patches from Qualcomm/Google, or restrict access permissions to the vulnerable /dev/msm_acdb device node