← Back to feed
advisories Zero Day Initiative

ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability

Zero Day Initiative

This vulnerability allows local attackers to escalate privileges on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the abil...

T1059 T1548 T1068 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories CISA Adds One Known Exploited Vulnerability to Catalog CISA Advisories · Aug 24 advisories DOUBLECUP's PNG Payload, (Mon, Aug 24th) SANS ISC · Aug 24 advisories ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability Zero Day Initiative · Aug 24