557 matches found
rndis-co
RNDIS-CO Resumen El gadget USB RNDIS puede ser explotado para volcar el contenido del espacio de memoria del kernel a través del mecanismo de actualización del filtro de paquetes. Descripción El manejador de solicitudes de transferencia de control USB RNDISMSGSET - rndissetresponse llama a...
cve-2026-43687
CVE-2026-43687 — Notas de ingeniería inversa y reproducción Ingeniería inversa independiente de la condición de carrera de la caché de acceso del cliente NFS de macOS CVE-2026-43687, además de un PoC funcional que desencadena la carrera y la captura en vivo con dtrace. El fallo es una lectura no...
razer-lycosa-kernel-lpe-BYOVD-Vulnerability-PoC
Lycosa.sys, Razer: dos vulnerabilidades del kernel accesibles por cualquier usuario local Descubierto a través de https://github.com/416rehman/DeepZero Fabricante: Razer Inc. Componente: Lycosa.sys, el controlador de filtro del teclado Razer Lycosa, x64 SHA-256:...
CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access
A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...
CVE-2026-97437
A flaw was found in the Linux kernel's ntfs3 file system driver. Improper bounds checking during directory reading and index lookups can lead to an out-of-bounds memory read. A local attacker could exploit this vulnerability by mounting a specially crafted NTFS image, which could crash the system...
CVE-2026-98032
A flaw was found in the Linux kernel's tracing subsystem. A race condition occurs when concurrent subbuffer resizing takes place while raw trace data is being read. A local user could exploit this flaw to cause a Denial of Service DoS or disclose uninitialized kernel memory due to stale buffer si...
Linux Distros Unpatched Vulnerability : CVE-2026-89776
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes The VXLAN VNI filter entry policy declares the GROUP/GROUP6 address attributes as NLABINARY wi...
CVE-2026-89776
In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes The VXLAN VNI filter entry policy declares the GROUP/GROUP6 address attributes as NLABINARY with only a maximum length, so validatenla accepts a payload shorter th...
PT-2026-93382
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VXLAN VNI filter entry policy where GROUP and GROUP6 address attributes are declared as NLA BINARY with only a maximum length. This allows the validate nla functio...
CVE-2026-86903
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...
CVE-2026-86901
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure...
CVE-2026-86900
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure...
EUVD-2026-77942
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory...
CVE-2026-43687
A race condition exists in the macOS NFS client (com.apple.filesystems.nfs) within the _nfs_vnop_access function. The vulnerability stems from an unsynchronized read of the nfsnode+0x158 pointer, which points to a per-UID access-cache array. A malicious NFSv3 server can trigger a reallocation of ...
CVE-2026-86903
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...
CVE-2026-86901
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure...
CVE-2026-86901
A vulnerability in macOS (specifically related to Golden Gate 27 ) was identified involving an out-of-bounds write caused by insufficient bounds checking. An attacker can trigger this issue by mounting a maliciously crafted exFAT volume , potentially leading to unexpected system termination or ke...
EUVD-2026-77865
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure...
CVE-2026-86901
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure...
CVE-2026-86900
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure...