Tag

#privilege-escalation

2 stories tagged privilege-escalation.

LegacyHive Windows zero-day puts admin access at risk

LegacyHive is a public Windows zero-day that escalates standard users to admin on patched systems. No CVE or patch yet, but MDE detection queries exist.

Lars Cornelissen · Jul 19, 2026

Abstract visualization of the Bad Epoll CVE-2026-46242 race condition in the Linux kernel epoll subsystem, showing overlapping execution threads colliding in a narrow six-instruction window that triggers a use-after-free granting root access on v6.4+ kernels including Android.

Cyber security

Bad Epoll kernel flaw CVE-2026-46242 roots Linux and Android

Bad Epoll (CVE-2026-46242) is a Linux epoll use-after-free giving unprivileged users root on v6.4+ kernels and Android. No workaround exists. Apply patch a6dc643c6931 now.

Lars Cornelissen · Jul 5, 2026