Skip to content
Threat Feed
Subscribe

Tag

Local-Exploitation

8 briefs RSS
medium advisory

Multiple Vulnerabilities in GNU Binutils

The GNU binutils package contains multiple vulnerabilities that allow a local attacker to cause a Denial of Service condition or disclose sensitive information by processing malformed object files.

binutils vulnerability local-exploitation
1t
high advisory

Local Privilege Escalation in Acunetix Web Vulnerability Scanning Engine

Acunetix 25.11.251107123 for Windows is vulnerable to local privilege escalation via DLL hijacking in the Web Vulnerability Scanning Engine (wvsc.exe) due to insecure directory path handling.

Acunetix privilege-escalation windows local-exploitation
1r 1t 1c
high advisory

Integer Overflow in GNU Emacs PBM/PPM/PGM Image Loader (CVE-2026-77219)

GNU Emacs versions prior to 31.0.91 are susceptible to an integer overflow vulnerability in the PBM/PPM/PGM image loader, potentially leading to heap memory disclosure.

Emacs +1 vulnerability command-injection local-exploitation
1t 1c updated
high advisory

CVE-2026-8164: ArkSigner Desktop Client Vulnerable to Search Order Hijacking

An Uncontrolled Search Path Element vulnerability, CVE-2026-8164, in ArkSigner Desktop Client versions from v2.2.16.10 through 17062026 allows a local attacker to perform Search Order Hijacking, potentially leading to arbitrary code execution or privilege escalation with the application's privileges.

ArkSigner Desktop Client vulnerability cve search-order-hijacking dll-sideloading privilege-escalation local-exploitation
2t 1c
medium advisory

Rockwell Automation Studio 5000 Logix Designer: Multiple Vulnerabilities Enable Code Execution

Multiple vulnerabilities in Rockwell Automation Studio 5000 Logix Designer allow a local attacker to execute arbitrary program code, which could lead to a compromise of the affected system or unauthorized control over the design environment.

Studio 5000 Logix Designer ics scada ot rce vulnerability local-exploitation
1t
high advisory

CVE-2026-14605: RT-Thread Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability (CVE-2026-14605) exists in the `recvmsg` function of the `ls1c CAN Handler` component within RT-Thread up to version 5.0.2, requiring local access for exploitation and having a publicly available exploit, potentially leading to high impact on confidentiality, integrity, and availability.

RT-Thread buffer-overflow cve local-exploitation embedded-systems
1t 1c
medium advisory

Multiple Vulnerabilities in expat XML Parser Library

Multiple vulnerabilities have been discovered in the expat XML parser library that can be exploited by a local attacker, potentially leading to a Denial of Service condition or allowing for arbitrary code execution on the affected system.

expat vulnerability library xml denial-of-service code-execution local-exploitation
2r 2t
high advisory

CVE-2026-25865: Punto Switcher Unquoted Search Path Vulnerability

CVE-2026-25865 describes an unquoted search path element vulnerability in Yandex Punto Switcher through version 4.5.0.583, allowing local attackers to execute arbitrary code by placing a malicious `RunDll32.exe` earlier in the system's PATH to hijack the application's insecure `WinExec` call, leading to arbitrary code execution with affected user privileges.

Punto Switcher privilege-escalation local-exploitation windows software-vulnerability path-interception
2r 2t