AZL-112708

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112708.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-112708
Upstream
  • CVE-2026-0011
Published
2026-03-02T19:16:29Z
Modified
2026-11-09T05:30:15Z
Summary
CVE-2026-0011 affecting package nmap 7.95-6
Details

In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Azure Linux:3 / nmap

Package

Name
nmap
Purl
pkg:rpm/azure-linux/nmap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
7.95-6

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112708.json"