Tag: race condition
4 articles
AI-Assisted Research Exposes Linux Kernel Zero-Day Flaw
Researchers have uncovered a long-standing vulnerability in the Linux kernel, known as CVE-2026-53264, which allows a local user to gain root privileges by exploiting a flaw in the packet-scheduling code. This zero-day flaw was identified with the help of AI-assisted research and has since been patched.
RefluXFS Linux Flaw Exposes Default RHEL Installs to Local Root Access
A newly discovered Linux kernel flaw, known as RefluXFS, leaves default RHEL installs vulnerable to local root access, allowing unprivileged users to gain persistent control over root-owned files. This critical vulnerability can be exploited with just read access, making it a major security concern.
Microsoft Defender Zero-Day Exploited for SYSTEM Access
A security researcher, known as Chaotic Eclipse, has discovered a Microsoft Defender zero-day exploit, dubbed RoguePlanet, that can give attackers unrestricted access to compromised machines. The proof-of-concept exploit, released under the handle MSNightmare, can yield a shell with SYSTEM-level privileges, allowing hackers to run arbitrary code and perform unauthorized actions.
Microsoft Defender Zero-Day Exploited for SYSTEM Privileges
A newly discovered Microsoft Defender zero-day exploit, dubbed RoguePlanet, can spawn a Windows command prompt with SYSTEM privileges, posing a significant threat to fully patched Windows 10 and 11 devices. This cleverly crafted exploit uses a hit-or-miss race condition to gain elevated access, with some machines surprisingly vulnerable to a 100% success rate.