apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Privilege Escalation
Buffer Overflow
Memory Corruption
Toaruos
Toaruos Project
NVD
GitHub
CVSS 3.0
7.8
EPSS
0.5%
BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Information Disclosure
Bluestacks
Bluestacks App Player
NVD
CVSS 3.0
8.0
EPSS
3.5%