CVE-2026-84561

CVE-2026-84561 is a double free memory management flaw across multiple Apple platforms, including macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7 , iOS/iPadOS 26.7 and 27, tvOS 27, visionOS 27, and watchOS 27. An app may cause unexpected system termination or kernel memory corruption ,...

EUVD-2026-77993

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or...

EUVD-2026-77992

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-28935

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-28935

CVE-2026-28935 is a kernel memory-handling flaw in Apple platforms. An app may be able to cause unexpected system termination or corrupt kernel memory . The issue was addressed with improved memory handling and is fixed in iOS 26.6.1 , iPadOS 26.6.1 , macOS Sequoia 15.8 , macOS Tahoe 26.6.2 , tvO...

CVE-2026-65365

CVE-2026-65365 is an out-of-bounds read in Apple's SMB (Server Message Block) handling, addressed with improved bounds checking. Connecting to a malicious SMB share may disclose kernel memory , rated CVSS 6.5 (Medium) with a network vector requiring user interaction. The flaw affects macOS Golden...

EUVD-2026-77953

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB share may disclose kernel memory...

CVE-2026-65365

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB share may disclose kernel memory...

EUVD-2026-78093

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84537

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84537

CVE-2026-84537 is a memory handling flaw in Apple macOS that allows an app to cause unexpected system termination or kernel memory corruption . The fix was released in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . The CVSS 3.1 base score is 6.6 (MEDIUM) with a local attack ve...

DIRTYFAIL

DIRTYFAIL Un detector unificado y un banco de pruebas de PoC para las familias de vulnerabilidades de escritura en caché de páginas de Linux Copy Fail y Dirty Frag. ██████╗ ██╗██████╗ ████████╗██╗ ██╗███████╗ █████╗ ██╗██╗ ██╔══██╗██║██╔══██╗╚══██╔══╝╚██╗ ██╔╝██╔════╝██╔══██╗██║██║ ██║...

CVE-2026-31635

🩸 CVE-2026-31635 – DirtyDecrypt Linux 内核本地权限提升（通过 RXGK 页面缓存损坏） "DirtyDecrypt" — 2026年 "Dirty" 系列漏洞利用之一 📖 概述 DirtyDecrypt （CVE-2026-31635）是 Linux 内核 rxrpc 子系统（特别是 rxgk 组件）中的一个本地权限提升 漏洞。 它滥用了 AES-CBC 解密过程中缺失的写时复制（COW）检查 ，允许非特权用户损坏页面缓存并实现任意文件写入 ，从而获得 root 权限。 ✨ 功能特性 ✅ 代码清晰、注释完善的 C 语言实现 ✅ 支持用户 + 网络命名...

CVE-2026-81005

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI subsystem. During the registration of an IPMI message handler, if the Baseboard Management Controller BMC device information cannot be fetched, a NULL pointer dereference can occur. This can allow a local attack...

CVE-2026-36425

CVE-2026-36425 : OPSWAT AppRemover Arbitrary Process Termination Un controlador kernel de OPSWAT firmado que mata cualquier proceso bajo demanda. Sin necesidad de derechos de administrador, sin comprobaciones de privilegios, sin hacer preguntas. Apúntalo a un EDR, a un antivirus, a un proceso...

CVE-2026-16147

The ITE IT82xx2 USB device-controller driver drivers/usb/udc/udcit82xx2.c mishandles multi-packet OUT transfers on non-control endpoints. In workhandlerout the active transfer buffer is obtained with udcbufpeek which does not dequeue it; when a full max-packet-size packet arrives but the buffer...

CVE-2026-16148

The ITE it82xx2 USB device-controller driver initialized its bus-suspend detection work with kworkinitdelayable&priv-suspendedwork, suspendedhandler inside it82xx2enable the driver's .enable op in drivers/usb/udc/udcit82xx2.c. This work item is scheduled essentially continuously while the USB bus...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock Sabrina Root exploit for Chromecast with Google T...

CVE-2026-16148

CVE-2026-16148 affects the ITE it82xx2 USB device-controller driver in Zephyr RTOS (drivers/usb/udc/udc_it82xx2.c). The root cause is that k_work_init_delayable() is called inside it82xx2_enable(), which unconditionally overwrites the delayable work structure without a busy check . Because it82xx...

CVE-2026-16148 Kernel panic in the it82xx2 USB device controller driver via re-initialization of a busy delayable work item

The ITE it82xx2 USB device-controller driver initialized its bus-suspend detection work with kworkinitdelayable&priv-suspendedwork, suspendedhandler inside it82xx2enable the driver's .enable op in drivers/usb/udc/udcit82xx2.c. This work item is scheduled essentially continuously while the USB bus...