NewsThe Hacker News
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Affected vendors and products
More on Privileged
Other advisories
- Not ratedosv:CVE-2026-111048FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes
- Not ratedosv:CVE-2026-115653Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode
- Not ratedosv:CLEANSTART-2024-DM16385Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privile...
- Not ratedosv:CLEANSTART-2024-DP99245Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access
- Not ratedosv:CLEANSTART-2024-AK19680Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access
- Not ratedosv:CLEANSTART-2024-DW19044Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privi...
- Not ratedosv:CLEANSTART-2024-ZI70174Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access
- Not ratedosv:CLEANSTART-2024-ZJ81902Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it
Other news entries
- Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company DataNewsThe Hacker News
- China APT Uses AI Pentest Tool Artex in ConnectWise AttacksNewsSecurityWeek
- Attackers Exploit Third Arista VCO Zero-Day in Four MonthsNewsSecurityWeek
- Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenantsNewsThe Register — Security
- Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside inNewsRapid7
- Multiple Arbitrary File Read/Write via SQL InjectionNewsFortinet PSIRT
- Persistent Denial of Service in Admin ProfileNewsFortinet PSIRT
- How to secure RMM software: 8 controls MSPs should testNewsBleepingComputer
Source: https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html
ID