Vendor

Ubuntu

3 briefs RSS

Exim Mail Transfer Agent User-After-Free Remote Code Execution Vulnerability (CVE-2026-45185)

CVE-2026-45185, a user-after-free vulnerability in Exim versions 4.97 through 4.99.2, allows an unauthenticated remote attacker to execute arbitrary code by sending crafted SMTP traffic with BDAT chunking during TLS shutdown.

Exim rce vulnerability cve-2026-45185 user-after-free gnutls

2r 1t 1c May 13, 2026

critical advisory

CVE-2026-31431 'Copy Fail' Linux Kernel Privilege Escalation

2 rules 1 TTP 1 CVE

The 'Copy Fail' vulnerability (CVE-2026-31431) in the Linux kernel allows a local attacker to escalate privileges to root, potentially leading to container breakout and lateral movement in cloud environments.

Amazon Linux 2023 +3 privilege-escalation linux kernel

2r 1t 1c May 2, 2026

critical threat

Local Privilege Escalation Vulnerability 'Copy Fail' in Linux Kernel

2 rules 1 TTP 1 CVE

A local privilege escalation vulnerability, dubbed 'Copy Fail' (CVE-2026-31431), affects Linux kernels released since 2017, allowing an unprivileged local attacker to gain root permissions by exploiting a logic bug in the authencesn cryptographic template.

Linux kernel +4 Theori privilege-escalation linux vulnerability

2r 1t 1c Apr 30, 2026