Skip to content
Threat Feed

Tag

Local-Privilege-Escalation

10 briefs RSS
high advisory

Radare2 Path Traversal Vulnerability in Project Deletion

Radare2 versions prior to 6.1.4 are vulnerable to a path traversal in project deletion, allowing local attackers to recursively delete arbitrary directories by escaping the 'dir.projects' root, leading to integrity and availability loss.

radare2 path-traversal local-privilege-escalation
2r 1t 1c
high advisory

Microsoft Graphics Component Heap-based Buffer Overflow Vulnerability (CVE-2026-32221)

CVE-2026-32221 is a heap-based buffer overflow vulnerability in the Microsoft Graphics Component, allowing a local attacker to execute arbitrary code.

cve-2026-32221 buffer-overflow local-privilege-escalation graphics-component
2r 2t 1c 1i
high advisory

Easy Video to iPod Converter 1.6.20 Local Buffer Overflow Vulnerability

Easy Video to iPod Converter 1.6.20 is vulnerable to a local buffer overflow in the user registration field, allowing a local attacker to overwrite the structured exception handler (SEH) by providing a crafted payload exceeding 996 bytes in the username field, potentially leading to arbitrary code execution with user privileges.

cve-2019-25701 buffer-overflow local-privilege-escalation windows
2r 2t 1c
high advisory

Vim Vulnerability Allows Local Code Execution

A local attacker can exploit a vulnerability in Vim to execute arbitrary code on a vulnerable system.

vim code-execution local-privilege-escalation
2r 1t
high advisory

Flat Assembler Stack-Based Buffer Overflow Vulnerability (CVE-2017-20228)

Flat Assembler version 1.71.21 is susceptible to a stack-based buffer overflow vulnerability, allowing local attackers to achieve arbitrary code execution by providing a crafted, oversized input file.

cve-2017-20228 buffer-overflow local-privilege-escalation
2r 1t
high advisory

PInfo 0.6.9-5.1 Local Buffer Overflow Vulnerability

PInfo version 0.6.9-5.1 is susceptible to a local buffer overflow vulnerability, enabling local attackers to execute arbitrary code by providing an overly large argument to the '-m' parameter, ultimately allowing for shellcode execution with user privileges.

buffer-overflow local-privilege-escalation cve-2016-20044
2r 1t
high advisory

TiEmu 3.03 Buffer Overflow Vulnerability (CVE-2016-20040)

TiEmu 3.03 is vulnerable to a buffer overflow in ROM parameter handling, enabling local attackers to crash the application or execute arbitrary code by providing an oversized ROM parameter via the command-line interface.

cve-2016-20040 buffer-overflow local-privilege-escalation
2r 1t
high advisory

FlexHEX 2.71 Local Buffer Overflow Vulnerability (CVE-2019-25627)

FlexHEX 2.71 is vulnerable to a local buffer overflow in the Stream Name field, allowing local attackers to execute arbitrary code via a structured exception handler (SEH) overflow.

buffer-overflow seh-overflow local-privilege-escalation windows
2r 2t
critical advisory

Lavavo CD Ripper 4.20 SEH Buffer Overflow Vulnerability

Lavavo CD Ripper 4.20 is vulnerable to a structured exception handling (SEH) buffer overflow, allowing local attackers to execute arbitrary code by supplying a malicious string in the License Activation Name field leading to arbitrary code execution and a bind shell.

buffer-overflow seh cve-2019-25615 local-privilege-escalation windows
2r 1t
high advisory

Admin Express 1.2.5.485 Local SEH Buffer Overflow Vulnerability

Admin Express 1.2.5.485 is susceptible to a local structured exception handling buffer overflow vulnerability, enabling local attackers to execute arbitrary code via a crafted payload in the Folder Path field of the System Compare feature.

cve-2019-25612 buffer-overflow local-privilege-escalation windows
2r 2t