Skip to content
Threat Feed
Subscribe

Vendor

Sudo Project

2 briefs RSS
high advisory

Local Privilege Escalation in sudo via TZ Variable Manipulation

A vulnerability in sudo (CVE-2026-96512) allows an authenticated local user to bypass time-based access restrictions by manipulating the TZ environment variable to influence timestamp evaluation.

sudo privilege-escalation
1r 1t 1c
high advisory

Sudo Chroot Privilege Escalation via NSSwitch File Manipulation (CVE-2025-32463)

Attackers can exploit CVE-2025-32463, a privilege escalation vulnerability in `sudo` when used with `chroot`, by creating a malicious `nsswitch.conf` file and associated Name Service Switch (NSS) modules within a controlled chroot environment to trick `sudo` into loading attacker-controlled code, leading to root privileges on Linux systems.

PoC sudo +1 privilege-escalation linux cve vulnerability nsswitch
1r 2t 1c updated