Alen Cheung

The Azure NFS mount helper aznfs contains an untrusted search path issue during mount operations. A local authorized attacker can manipulate the `PATH` or working directory to force the application to load a rogue executable or library, leading to privilege escalation to root. Remote attackers are not impacted.

🚨 CVE-2026-122987 Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to elevate privileges over a network. 🎖@cveNotify

Incorrect default permissions in ASP.NET Core allow an authorized attacker to elevate privileges locally. Additionally, unsafe ownership metadata in .NET tarballs enables a local attacker to modify files and gain elevated privileges.