18 matches found
CVE-2022-28672
CVE-2022-28672 Discord 服务器 此漏洞是由于对javascript对象内存引用的不当处理导致的Use after Free。 博客 Foxit PDF Reader - UaF - RCE - JIT Spraying 安全公告 CVE-2022-28672 演示...
CVE-2022-37332-RCE-
Foxit 零日漏洞 : 正在开发中... 我只需要实现 JIT SPRAYING ..... 也在版本 9.0.1.1049 上测试过,所以嗯,我不知道 : 享受...
CVE-2022-28672
CVE-2022-28672 CVE-2022-28672 Foxit PDF Reader 漏洞 - UaF - RCE - JIT Spraying FortiOS、FortiProxy 和 FortiSwitchManager 认证绕过 IOC(CVE-2022-40684) 介绍 最近的 CVE FortiOS / FortiProxy / FortiSwitchManager 已在野外被利用。我们想提供有关该漏洞的额外信息,以便用户能够开始判断自己是否已被入侵。本文中,我们讨论了 FortiOS 7.2.1 的日志启用和...
AZL-93809 CVE-2026-64507 affecting package kernel for versions less than 6.6.145.2-1
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...
CVE-2026-64508
In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...
CVE-2026-64507
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...
UBUNTU-CVE-2026-64507
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...
CVE-2026-64508
In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...
EUVD-2026-48852
In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...
CVE-2026-64508
In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...
FreeBSD : flash -- multiple vulnerabilities (07888b49-35c4-11e6-8e82-002590263bf5)
Adobe reports : These updates harden a mitigation against JIT spraying attacks that could be used to bypass memory layout randomization mitigations CVE-2016-1006. These updates resolve type confusion vulnerabilities that could lead to code execution CVE-2016-1015, CVE-2016-1019. These updates...
Flash Player < 11.2.202.616 / 18.0.0.343 / 21.0.0.213 Multiple Vulnerabilities (APSB16-10)
Binary data 9276.prm...
Mageia: Security Advisory (MGASA-2016-0134)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
flashplugin: multiple issues
CVE-2016-1006 JIT spraying mitigation bypass These updates harden a mitigation against JIT spraying attacks that could be used to bypass memory layout randomization mitigations. - CVE-2016-1015 CVE-2016-1019 arbitrary code execution These updates resolve type confusion vulnerabilities that could...
MGASA-2016-0134 Updated flash-player-plugin packages fix security vulnerabilities
Adobe Flash Player 11.2.202.616 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update hardens a mitigation against JIT spraying attacks that could be used to bypass memory layout...
Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-02105)
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...
Google Adds Flash Sandbox to Chrome Browser
Two weeks after releasing Reader X with its new sandbox security mechanism, Adobe has teamed up with Google to enable a sandboxed version of its Flash software to run in Google Chrome. The two companies said on Wednesday that Google has released a version of Chrome to its developer channel that...
Immunity Canvas: AURORA_FLASH
Name| auroraflash ---|--- CVE| CVE-2010-0249 Exploit Pack| CANVAS Description| Aurora vulnerability with ActionScript JIT spraying for IE8 and Windows 7 Notes| CVE Name: CVE-2010-0249 VENDOR: Microsoft VersionsAffected: Repeatability: References: MS10-002 CVE Url: Date public: 01/21/2001 CVSS: 9....