Kev

@kevin_backhouse · Twitter · 2024-11-07 23:24 UTC

The contrast between two CUPS vulns is amazing. This one, CVE-2024-35235, seems to have flown completely under the radar - in total contrast to CVE-2024-47176. It was an LPE with an exploit chain that sounds very reliable. I only heard about it for the first time today.

Snyk

@snyksec · Twitter · 2024-10-02 17:02 UTC

Want more CUPS vulns? Read about how our security labs team chained CUPS with some Ubuntu features for privilege escalation on Ubuntu 24.04: https://snyk.co/uhxsS