uutils coreutils CVE-2026-35346

The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly ex

Privilege escalation to root in uutils coreutils chroot utility allows low-privileged local attackers with write access

Recursive chmod operations can bypass --preserve-root protection in uutils coreutils versions prior to 0.6.0, allowing l

Local privilege escalation in uutils coreutils mkfifo allows authenticated users to downgrade permissions on arbitrary f

Privilege escalation in uutils coreutils mkfifo utility allows local attackers with low privileges to manipulate file pe

Bypass of --preserve-root protection in uutils coreutils rm utility allows local users to recursively delete the root fi

The mv utility in uutils coreutils improperly expands symbolic links instead of preserving them during moves across file

The cp utility in uutils coreutils improperly preserves setuid and setgid bits when the chown operation fails during fil

The split utility in uutils coreutils contains a time-of-check to time-of-use (TOCTOU) race condition that allows local

A time-of-check to time-of-use (TOCTOU) race condition in the mv utility of uutils coreutils during cross-device move op

The touch utility in uutils coreutils suffers from a Time-of-Check to Time-of-Use (TOCTOU) race condition that allows lo

Privilege escalation via symlink attack in uutils coreutils install utility when using the -D flag allows local attacker