Monthly
Privilege escalation in Dell PowerProtect Data Domain Feature Release 7.7.1.0 through 8.8 allows an authenticated, low-privileged remote attacker to obtain high-impact confidentiality, integrity, and availability effects on the appliance. Dell has released a vendor fix in 8.9.0.0; no public exploit has been identified at time of analysis, and the issue warrants prompt remediation rather than emergency action.
Local jail escape in FreeBSD allows an attacker with code execution inside a jail to bypass the filesystem root restriction by re-sending a directory file descriptor received from a different jail via SCM_RIGHTS, because FD_RESOLVE_BENEATH is not preserved during descriptor transfer. The flaw requires a cross-jail file-descriptor-passing channel, is not remotely reachable, and at time of analysis no public exploit code or active exploitation has been identified; EPSS is low at 0.19% (8th percentile). The input CVSS of 9.8 (AV:N/AC:L/PR:N) overstates risk; the authoritative assessment is CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N, reflecting local access, high complexity, and required cross-jail descriptor passing.
FreeBSD jail escape allows a local attacker with code execution inside a jail to break out of the jail's filesystem root restriction by abusing renameat(2) and fchdir(2) when the process has received a directory file descriptor from another jail. This requires a specialized cross-jail file descriptor passing setup and the target directory to reside on a filesystem reachable from the exploiting jail's root, making exploitation non-trivial and limited to specific configurations. No public exploit identified at time of analysis, and the EPSS score is 0.18% (7th percentile), indicating a low likelihood of exploitation.
Jail filesystem-root isolation can be bypassed on FreeBSD hosts where fdescfs(4) is mounted inside a jail with the non-default "nodup" option: opening /dev/fd/N returns a descriptor that does not inherit the FD_RESOLVE_BENEATH constraint or the Capsicum capability rights of descriptor N, so a jailed process that already holds a directory descriptor passed in from another jail can resolve paths outside its own jail root. The flaw is strictly local (CVSS 7.1, AV:L/PR:L) and only exploitable in multi-jail deployments that pass directory file descriptors across jail boundaries; default fdescfs mounts and single-jail hosts are not affected, and no public exploit code or active exploitation has been identified, with EPSS at a low 0.18% (7th percentile). Patched builds are 14.4-RELEASE-p10, 14.5-RELEASE-p1, 15.0-RELEASE-p14 and 15.1-RELEASE-p4.
Write-before-consent in Hugging Face Transformers' GenerativePreTrainedModel.load_custom_generate() allows attacker-controlled Python files to be silently written to ~/.cache/huggingface/modules/ even when the user declines the trust prompt. Affected versions span 4.49.0 through 5.8.1. While immediate execution is blocked by the trust gate, the persisted cache file creates a stale-cache collision risk: subsequent loads of unrelated trusted models may inadvertently execute the previously cached, attacker-supplied Python code. No public exploit has been identified at time of analysis.
Privilege boundary violation in FreeBSD's hwpmc(4) hardware performance monitoring subsystem allows a low-privileged local user to continue observing a process via attached PMCs after that process elevates privileges by executing a setuid or setgid binary, directly contrary to the kernel's intended security policy. Affected versions span FreeBSD 14.4-RELEASE before p9, 15.0-RELEASE before p13, and 15.1-RELEASE before p3; vendor patches are available per FreeBSD Security Advisory SA-26:56. No public exploit has been identified and EPSS sits at 0.15% (5th percentile), placing this as a low near-term exploitation priority despite the high vendor CVSS score.
Local privilege escalation in Ubuntu's AccountsService (before 23.13.9-8ubuntu7) lets any low-privileged local user gain full root access by exploiting an incomplete privilege-drop in a Canonical-specific patch. The patch sets the effective UID/GID to the target user before launching language helper scripts but neglects to change the real UID, leaving ruid=0. Any shell spawned by a helper script can call setuid(0) to restore root effective privileges, granting complete system compromise. No public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Privilege management regression in FreeBSD 15.x ktrace(2) allows an unprivileged jail user to manipulate or suppress the jailed root user's kernel tracing configuration. Because an unrelated code change inadvertently causes PRIV_KTRACE to always be denied to jailed root, that user's active trace sessions are not marked as privileged - permitting any jail user holding debug rights over a traced process to alter or clear those trace flags. No public exploit has been identified and the EPSS score of 0.18% (8th percentile) reflects negligible opportunistic exploitation probability, though multi-tenant jail environments relying on ktrace for security auditing face a meaningful auditability risk.
Path containment bypass in FreeBSD's unlinkat(2) and funlinkat(2) syscalls allows a local low-privileged process to delete files outside its intended directory scope. The kernel validates AT_RESOLVE_BENEATH but silently discards it before handing off to the path resolution layer, making the flag a no-op security guarantee. Applications using this flag as a sandbox boundary for file deletion operations are exposed to unintended tree traversal, with impact on both filesystem integrity and availability. No public exploit code and no CISA KEV listing have been identified; EPSS is 0.13% (3rd percentile), indicating low observed exploitation probability.
Privilege escalation via incomplete privilege drop in the Python 'sh' subprocess library (versions < 2.2.4): when a root/privileged process launches a command with the _uid option, the child changes UID and primary GID but fails to clear the parent's supplementary groups via setgroups(). Any subprocess expected to run unprivileged can therefore retain sensitive parent groups (root, docker, disk, shadow, sudo), reading or writing resources those groups grant. No public exploit identified at time of analysis and it is not in CISA KEV; the fix is confirmed in release 2.2.4.
Privilege escalation in Dell PowerProtect Data Domain Feature Release 7.7.1.0 through 8.8 allows an authenticated, low-privileged remote attacker to obtain high-impact confidentiality, integrity, and availability effects on the appliance. Dell has released a vendor fix in 8.9.0.0; no public exploit has been identified at time of analysis, and the issue warrants prompt remediation rather than emergency action.
Local jail escape in FreeBSD allows an attacker with code execution inside a jail to bypass the filesystem root restriction by re-sending a directory file descriptor received from a different jail via SCM_RIGHTS, because FD_RESOLVE_BENEATH is not preserved during descriptor transfer. The flaw requires a cross-jail file-descriptor-passing channel, is not remotely reachable, and at time of analysis no public exploit code or active exploitation has been identified; EPSS is low at 0.19% (8th percentile). The input CVSS of 9.8 (AV:N/AC:L/PR:N) overstates risk; the authoritative assessment is CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N, reflecting local access, high complexity, and required cross-jail descriptor passing.
FreeBSD jail escape allows a local attacker with code execution inside a jail to break out of the jail's filesystem root restriction by abusing renameat(2) and fchdir(2) when the process has received a directory file descriptor from another jail. This requires a specialized cross-jail file descriptor passing setup and the target directory to reside on a filesystem reachable from the exploiting jail's root, making exploitation non-trivial and limited to specific configurations. No public exploit identified at time of analysis, and the EPSS score is 0.18% (7th percentile), indicating a low likelihood of exploitation.
Jail filesystem-root isolation can be bypassed on FreeBSD hosts where fdescfs(4) is mounted inside a jail with the non-default "nodup" option: opening /dev/fd/N returns a descriptor that does not inherit the FD_RESOLVE_BENEATH constraint or the Capsicum capability rights of descriptor N, so a jailed process that already holds a directory descriptor passed in from another jail can resolve paths outside its own jail root. The flaw is strictly local (CVSS 7.1, AV:L/PR:L) and only exploitable in multi-jail deployments that pass directory file descriptors across jail boundaries; default fdescfs mounts and single-jail hosts are not affected, and no public exploit code or active exploitation has been identified, with EPSS at a low 0.18% (7th percentile). Patched builds are 14.4-RELEASE-p10, 14.5-RELEASE-p1, 15.0-RELEASE-p14 and 15.1-RELEASE-p4.
Write-before-consent in Hugging Face Transformers' GenerativePreTrainedModel.load_custom_generate() allows attacker-controlled Python files to be silently written to ~/.cache/huggingface/modules/ even when the user declines the trust prompt. Affected versions span 4.49.0 through 5.8.1. While immediate execution is blocked by the trust gate, the persisted cache file creates a stale-cache collision risk: subsequent loads of unrelated trusted models may inadvertently execute the previously cached, attacker-supplied Python code. No public exploit has been identified at time of analysis.
Privilege boundary violation in FreeBSD's hwpmc(4) hardware performance monitoring subsystem allows a low-privileged local user to continue observing a process via attached PMCs after that process elevates privileges by executing a setuid or setgid binary, directly contrary to the kernel's intended security policy. Affected versions span FreeBSD 14.4-RELEASE before p9, 15.0-RELEASE before p13, and 15.1-RELEASE before p3; vendor patches are available per FreeBSD Security Advisory SA-26:56. No public exploit has been identified and EPSS sits at 0.15% (5th percentile), placing this as a low near-term exploitation priority despite the high vendor CVSS score.
Local privilege escalation in Ubuntu's AccountsService (before 23.13.9-8ubuntu7) lets any low-privileged local user gain full root access by exploiting an incomplete privilege-drop in a Canonical-specific patch. The patch sets the effective UID/GID to the target user before launching language helper scripts but neglects to change the real UID, leaving ruid=0. Any shell spawned by a helper script can call setuid(0) to restore root effective privileges, granting complete system compromise. No public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Privilege management regression in FreeBSD 15.x ktrace(2) allows an unprivileged jail user to manipulate or suppress the jailed root user's kernel tracing configuration. Because an unrelated code change inadvertently causes PRIV_KTRACE to always be denied to jailed root, that user's active trace sessions are not marked as privileged - permitting any jail user holding debug rights over a traced process to alter or clear those trace flags. No public exploit has been identified and the EPSS score of 0.18% (8th percentile) reflects negligible opportunistic exploitation probability, though multi-tenant jail environments relying on ktrace for security auditing face a meaningful auditability risk.
Path containment bypass in FreeBSD's unlinkat(2) and funlinkat(2) syscalls allows a local low-privileged process to delete files outside its intended directory scope. The kernel validates AT_RESOLVE_BENEATH but silently discards it before handing off to the path resolution layer, making the flag a no-op security guarantee. Applications using this flag as a sandbox boundary for file deletion operations are exposed to unintended tree traversal, with impact on both filesystem integrity and availability. No public exploit code and no CISA KEV listing have been identified; EPSS is 0.13% (3rd percentile), indicating low observed exploitation probability.
Privilege escalation via incomplete privilege drop in the Python 'sh' subprocess library (versions < 2.2.4): when a root/privileged process launches a command with the _uid option, the child changes UID and primary GID but fails to clear the parent's supplementary groups via setgroups(). Any subprocess expected to run unprivileged can therefore retain sensitive parent groups (root, docker, disk, shadow, sudo), reading or writing resources those groups grant. No public exploit identified at time of analysis and it is not in CISA KEV; the fix is confirmed in release 2.2.4.