Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

2 result(s)

Export this search: RSS · CSV · STIX

CVE-2026-35535 High · 7.8 CWE-271 Apr 3, 2026

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups…

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

CVE-2026-25704 Medium · 5.8 CWE-271 Mar 30, 2026

Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData

A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before https://github.Com/pop-os/cosmic-greeter/pull/426.