261 matches found
CVE-2026-103111
A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...
jitsploitation
jitsploitation iOS browser exploit for CVE-2020-9802, an old JIT bug. This is an exploit for a popular JIT compiler bug in the WebKit engine for macOS and iOS originally documented by Project Zero. I re-implemented the exploit for this bug as an exercise in learning browser exploitation. Video...
cve-2018-4233
CVE-2018-4233 Exploit para CVE-2018-4233, un error en el compilador JIT de WebKit. Probado en Safari 11.0.3 en macOS 10.13.3. Para más detalles, consulte https://saelo.github.io/presentations/blackhatus18attackingclientsidejitcompilers.pdf El exploit obtiene lectura/escritura arbitraria de memori...
CVE-2026-10702
CVE-2026-10702 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as...
CVE-2021-21220
CVE-2021-21220 漏洞利用 从错误的 JIT 行为到远程代码执行 概述 本演示文稿解释了 CVE-2021-21220 的利用过程,这是 Google Chrome 的 V8 JavaScript 引擎 中的一个漏洞,由 JIT 编译器在优化过程中的错误假设引起。 演示涵盖以下内容: V8 如何执行即时(JIT)编译 优化过程中如何出现有符号/无符号类型混淆错误 该错误如何导致越界(OOB)数组原语 攻击者如何利用 OOB 访问泄露地址并实现任意内存写入 WebAssembly(Wasm)如何成为本机代码执行的目标 现有的缓解措施和现代浏览器防御 演示目标 本演示的目标是展示...
cve-2017-7117
cve-2017-7117 About the Bug A type-confusion and UAF found in iOS 10.3.4 and earlier, Safari before 11.0. CVE-2017-7117: mitre.org Original Proof of Concept Discovered by @lokihardt, source: Google Project Zero function f let o = ; for let i in xx: 0 // i is a String for i of 0 // i is now a...
PT-2026-89766
In PCRE2 before 10.48, pcre2 jit match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...
CVE-2026-76044
creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:47+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:45:06+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824...
Linux Distros Unpatched Vulnerability : CVE-2026-74976
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154,...
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component...
CVE-2026-19173 vulnerabilities
Vulnerabilities for packages: chromium...
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component...
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...
The vulnerability of the JIT-compiler of Mozilla Firefox allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the JIT-compiler of Mozilla Firefox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20260723-73-0072
The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
[SECURITY] Fedora 43 Update: pypy3.11-7.3.21-3.3.11.fc43
PyPy's implementation of Python 3.11, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...
ROS-20260203-73-0032
A vulnerability in the bpfjitcomp.c component of the Linux operating system kernel is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260129-73-0054
A vulnerability in the JIT compiler of Mozilla Firefox, Firefox ESR and Thunderbird email client is related to incorrect code generation control. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity and availability of protected information...
The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.
The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.
The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...