CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Defender Local Privilege Escalation Vulnerability (CVE-2026-41091) Technical Advisory
[Affected Scope] Windows operating system environments with Microsoft Defender enabled
[Impact] A local authorized attacker can exploit symbolic link resolution to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the host
[Mitigation] Immediately apply the official Microsoft security updates and ensure the Defender engine and definitions are updated to the latest versions
Red Hat / Oracle Linux ABRT Local Privilege Escalation Vulnerability (CVE-2015-5287) Analysis and Mitigation Guide
[Affected Scope] Automatic Bug Reporting Tool (ABRT) versions prior to 2.7.1 installed on Red Hat Enterprise Linux and Oracle Linux systems
[Impact] Local attackers with limited privileges can exploit a symlink attack to gain root privileges and achieve full system compromise
[Mitigation] Upgrade ABRT packages to version 2.7.1 or higher, or temporarily disable the abrt-ccpp service