Monthly
Unauthenticated local privilege abuse in the Kilo Code CLI (versions before v7.4.1) lets any local process or user that can reach the daemon/TUI loopback HTTP listener toggle the '/permission/allow-everything' permission mode and then drive the agent into executing arbitrary code on the host. The issue combines two weaknesses: the daemon shipped a hardcoded default Basic-auth password of 'kilo', and the permission-toggle route was exempted from authentication whenever global auth was optional, so no credentials were required at all (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 8.4, CWE-280). Exploitation is not network-remote: it requires the daemon/TUI HTTP server to be running and the attacker to already have local reach to its loopback port, so it is access-gated rather than an internet-facing crisis; no public exploit code was identified at time of analysis, CISA SSVC records Exploitation as 'none' with Automatable 'no', and no EPSS score was supplied.
Local applications on macOS versions prior to 27 can escalate to root privileges because the operating system fails to properly validate entitlements before granting privileged operations (CWE-280). An attacker who can get a user to launch — or who can otherwise run — a crafted app on the target Mac gains full root-level control of the system, with high impact to confidentiality, integrity, and availability. The flaw is fixed in macOS Golden Gate 27 per Apple's advisory; no CISA KEV listing, no public exploit code, and no EPSS score were provided at time of analysis, so this is currently a patching-hygiene issue rather than a confirmed active threat.
Local privilege escalation in Apple macOS Sequoia (before 15.7.8) and macOS Tahoe (before 26.6) lets a malicious application already running as a normal user obtain root privileges. Apple addressed the flaw by adding restriction checks in its permission-handling code, disclosing it only as 'a permissions issue'; fixed versions are macOS Sequoia 15.7.8 and macOS Tahoe 26.6. There is no CISA KEV listing and no public exploit code identified at time of analysis, and CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no', so this is a patching-during-normal-maintenance item rather than an emergency remote threat.
Local privilege escalation in Apple macOS allows a malicious or compromised application already running on the system to obtain root privileges. The flaw is a permissions-handling defect (CWE-280) that Apple addressed by adding additional restrictions, with fixes shipping in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27. Exploitation requires local code execution as a normal user (AV:L, PR:L) and, per CISA SSVC, is not automatable with no known exploitation activity; no public exploit code or EPSS signal was provided at time of analysis.
Apple macOS contains a local privilege-escalation flaw in which an application running on the system can escalate to root because entitlement checks were insufficient. Apple addressed the issue with additional entitlement validation, fixing it in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27; earlier releases (pre-15.8, pre-26.7) remain vulnerable. The attack is local (CVSS AV:L) and requires the attacker to already have code running as an ordinary user, so exploitation is typically a second-stage payload delivered by a malicious app or initial social-engineering lope rather than a remote network attack. No public exploit code and no CISA KEV entry were identified at time of analysis, and no EPSS score was supplied by the contributing sources.
Local privilege escalation in Windows Enterprise App Management allows a low-privileged authenticated local attacker to gain full control over an affected system via improper handling of insufficient permissions (CWE-280). The vulnerability spans a wide swath of Microsoft's Windows ecosystem - from Windows 10 1607 through Windows 11 26H1 and Windows Server 2016 through 2025 - making it broadly relevant to enterprise environments. No public exploit or CISA KEV listing has been identified at time of analysis; Microsoft has released patched builds for all affected versions.
Local privilege escalation in Zscaler Client Connector enables a standard (non-administrative) local user to execute arbitrary code in a privileged context via multiple improper privilege handling flaws (CWE-280). The scope change captured in the CVSS vector (S:C) reflects that exploitation breaks the security boundary of the Client Connector's privileged agent process, extending impact beyond the attacker's initial user context to full High-rated confidentiality, integrity, and availability impact. No public exploit code or CISA KEV listing has been identified at time of analysis.
Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any org in the deployment by exploiting a misplaced permission check. The server incorrectly validates the ORG_ADMIN permission against the caller's own child org rather than the ROOT org, and child org admins can self-grant this permission within their local ACL scope. An attacker with child org admin credentials can permanently delete peer orgs - including all their forensic artifacts, hunt data, and client configurations - well outside their authorized boundary.
Gitea's Actions permission engine grants fork-PR task tokens unauthorized code-read access to third private repositories via a missing fork-PR discriminator in the collaborative-owner branch of `GetActionsUserRepoPermission`. All Gitea instances running versions up to and including 1.26.4 are affected when the collaborative-owner Actions feature is configured, as confirmed by vendor advisory GHSA-fj8v-hjwv-qm88 and EUVD-2026-58151. An attacker who has had at least one fork PR previously approved can exploit this to clone the full source of a private repository they were never authorized to access; impact is strictly read-only, with no write or code-execution capability. A functional PoC was included in the security advisory; this CVE is not in the CISA KEV catalog and no EPSS score was provided in the available data.
Privilege escalation in Imagination Technologies' Graphics DDK GPU driver allows kernel-level software inside a Host VM to post malformed commands to the GPU firmware, forcing an improper GPU register access that can be leveraged to gain elevated privileges. The flaw (CWE-280, improper handling of permissions) affects multiple DDK release branches from 1.18 through 26.1 and is rated CVSS 7.8 (local, low complexity). There is no public exploit identified at time of analysis, and its EPSS probability is low (0.14%).
Unauthenticated local privilege abuse in the Kilo Code CLI (versions before v7.4.1) lets any local process or user that can reach the daemon/TUI loopback HTTP listener toggle the '/permission/allow-everything' permission mode and then drive the agent into executing arbitrary code on the host. The issue combines two weaknesses: the daemon shipped a hardcoded default Basic-auth password of 'kilo', and the permission-toggle route was exempted from authentication whenever global auth was optional, so no credentials were required at all (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 8.4, CWE-280). Exploitation is not network-remote: it requires the daemon/TUI HTTP server to be running and the attacker to already have local reach to its loopback port, so it is access-gated rather than an internet-facing crisis; no public exploit code was identified at time of analysis, CISA SSVC records Exploitation as 'none' with Automatable 'no', and no EPSS score was supplied.
Local applications on macOS versions prior to 27 can escalate to root privileges because the operating system fails to properly validate entitlements before granting privileged operations (CWE-280). An attacker who can get a user to launch — or who can otherwise run — a crafted app on the target Mac gains full root-level control of the system, with high impact to confidentiality, integrity, and availability. The flaw is fixed in macOS Golden Gate 27 per Apple's advisory; no CISA KEV listing, no public exploit code, and no EPSS score were provided at time of analysis, so this is currently a patching-hygiene issue rather than a confirmed active threat.
Local privilege escalation in Apple macOS Sequoia (before 15.7.8) and macOS Tahoe (before 26.6) lets a malicious application already running as a normal user obtain root privileges. Apple addressed the flaw by adding restriction checks in its permission-handling code, disclosing it only as 'a permissions issue'; fixed versions are macOS Sequoia 15.7.8 and macOS Tahoe 26.6. There is no CISA KEV listing and no public exploit code identified at time of analysis, and CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no', so this is a patching-during-normal-maintenance item rather than an emergency remote threat.
Local privilege escalation in Apple macOS allows a malicious or compromised application already running on the system to obtain root privileges. The flaw is a permissions-handling defect (CWE-280) that Apple addressed by adding additional restrictions, with fixes shipping in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27. Exploitation requires local code execution as a normal user (AV:L, PR:L) and, per CISA SSVC, is not automatable with no known exploitation activity; no public exploit code or EPSS signal was provided at time of analysis.
Apple macOS contains a local privilege-escalation flaw in which an application running on the system can escalate to root because entitlement checks were insufficient. Apple addressed the issue with additional entitlement validation, fixing it in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27; earlier releases (pre-15.8, pre-26.7) remain vulnerable. The attack is local (CVSS AV:L) and requires the attacker to already have code running as an ordinary user, so exploitation is typically a second-stage payload delivered by a malicious app or initial social-engineering lope rather than a remote network attack. No public exploit code and no CISA KEV entry were identified at time of analysis, and no EPSS score was supplied by the contributing sources.
Local privilege escalation in Windows Enterprise App Management allows a low-privileged authenticated local attacker to gain full control over an affected system via improper handling of insufficient permissions (CWE-280). The vulnerability spans a wide swath of Microsoft's Windows ecosystem - from Windows 10 1607 through Windows 11 26H1 and Windows Server 2016 through 2025 - making it broadly relevant to enterprise environments. No public exploit or CISA KEV listing has been identified at time of analysis; Microsoft has released patched builds for all affected versions.
Local privilege escalation in Zscaler Client Connector enables a standard (non-administrative) local user to execute arbitrary code in a privileged context via multiple improper privilege handling flaws (CWE-280). The scope change captured in the CVSS vector (S:C) reflects that exploitation breaks the security boundary of the Client Connector's privileged agent process, extending impact beyond the attacker's initial user context to full High-rated confidentiality, integrity, and availability impact. No public exploit code or CISA KEV listing has been identified at time of analysis.
Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any org in the deployment by exploiting a misplaced permission check. The server incorrectly validates the ORG_ADMIN permission against the caller's own child org rather than the ROOT org, and child org admins can self-grant this permission within their local ACL scope. An attacker with child org admin credentials can permanently delete peer orgs - including all their forensic artifacts, hunt data, and client configurations - well outside their authorized boundary.
Gitea's Actions permission engine grants fork-PR task tokens unauthorized code-read access to third private repositories via a missing fork-PR discriminator in the collaborative-owner branch of `GetActionsUserRepoPermission`. All Gitea instances running versions up to and including 1.26.4 are affected when the collaborative-owner Actions feature is configured, as confirmed by vendor advisory GHSA-fj8v-hjwv-qm88 and EUVD-2026-58151. An attacker who has had at least one fork PR previously approved can exploit this to clone the full source of a private repository they were never authorized to access; impact is strictly read-only, with no write or code-execution capability. A functional PoC was included in the security advisory; this CVE is not in the CISA KEV catalog and no EPSS score was provided in the available data.
Privilege escalation in Imagination Technologies' Graphics DDK GPU driver allows kernel-level software inside a Host VM to post malformed commands to the GPU firmware, forcing an improper GPU register access that can be leveraged to gain elevated privileges. The flaw (CWE-280, improper handling of permissions) affects multiple DDK release branches from 1.18 through 26.1 and is rated CVSS 7.8 (local, low complexity). There is no public exploit identified at time of analysis, and its EPSS probability is low (0.14%).