libget_user_exploit

这个库利用CVE-2013-6282漏洞读取内核内存。...

CVE-2026-14960-CVE-2026-14961

Pegatron TdeIo64 驱动程序（tdeio64.sys）中的权限提升漏洞 | ---|--- CVE 编号| CVE-2026-14960, CVE-2026-14961 厂商| Pegatron Corporation 产品| TdeIo 驱动程序（tdeio64.sys） 设备接口| \.\TdeIo 漏洞类型| 不当的访问控制（CWE-284）、任意内核内存读/写（CWE-787/CWE-125）、未受保护的 I/O 端口访问 影响| 权限提升至 SYSTEM、硬件级入侵 攻击向量| 本地 所需权限| 低（任何本地用户） 测试平台| Windows 10/11 x64...

CVE-2026-84572

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65359

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination o...

CVE-2026-43690

CVE-2026-43690 is a race condition in the macOS kernel , addressed with improved locking . A local user may be able to read kernel memory , which could expose sensitive data to unprivileged processes. The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No expl...

EUVD-2026-78125

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory...

EUVD-2026-77920

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65359

CVE-2026-65359 is an out-of-bounds read in Apple platforms, addressed with improved bounds checking. The vulnerability allows a local user to cause unexpected system termination or read kernel memory . No specific component or subsystem is identified in the provided documents. The issue is fixed ...

libmsm_vfe_read_exploit

CVE-2014-4321 を利用してカーネルメモリを読み取る。...

CVE-2025-67246

CVE-2025-67246 취약점 제목 : LuDaShi 부적절한 접근 제어 영향 받는 버전 : 6.1026.4505.112 미만 발견 시간 : 2025년 12월 2일 발견자 : ZhouRui 분석 보고서 : LuDaShi는 잘 알려진 무료 시스템 유틸리티 소프트웨어로, 무료 하드웨어 인증, 컴퓨터휴대폰 안정성 보장 및 시스템 성능 향상을 제공합니다. LuDaShi 및 그 계열 시스템 제품컴퓨터 성능 최적화, 시스템 성능 모니터링의 ComputerZx64.sys 드라이버에는 하위 4GB 커널 주소를 읽을 수 있는 데이터가 포함...

CVE-2020-1206-POC

CVE-2020-1206 초기화되지 않은 커널 메모리 읽기 POC c 2020 ZecOps, Inc. - https://www.zecops.com - 공격자의 실수를 찾아내다 CVE-2020-1206 / "SMBleed" 확인용 POC 예상 결과: 대상 컴퓨터의 커널 메모리를 포함하는 로컬 파일. 교육 및 기업 환경에서의 테스트 용도로만 사용됩니다. ZecOps는 이 코드에 대해 어떠한 책임도 지지 않으며, 사용은 본인 책임 하에 이루어집니다. 에이전트 없는 DFIR 도구서버, 엔드포인트, 모바일 장치용를 통해 SMBleed ...

CVE-2025-65264

CVE-2025-65264 설명 CPU‑Z 2.17 및 이전 버전및 버전 1.0.6.1 및 이전 버전의 CPU‑Z 드라이버를 사용하는 기타 제품에서 드라이버예: cpuz161.sys는 사용자가 제공한 주소의 값을 역참조하여 호출자가 제공한 시스템 버퍼에 썼습니다. 공격자는 입력 버퍼에 대상 주소를 제공하여 IOCTL을 통해 임의의 커널 메모리를 읽을 수 있습니다. PoC 이는 System 프로세스의 토큰을 읽는 간단한 PoC입니다. 영향 이로 인해 정보 유출이 발생할 수 있습니다. 또한 임의의 커널 쓰기에 취약한 드라이버와...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098785 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new expectations Use the existing master conntrac...

CVE-2026-9728

CVE-2026-9728 is a time-of-check/time-of-use (TOCTOU) race condition in the Zephyr RTOS userspace mailbox subsystem. The syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validates msg->data/msg->size by reading them directly from live userspace memory, then forwards the o...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel up to version 6.3.1, a use-after-free issue in Netfilter’s nftables module arises when processing batch requests. This allows unprivileged local users to obtain root privileges. The issue occurs due to improper handling of anonymous sets...

Astra Linux – Vulnerability in Linux, Linux 5.10

A vulnerability was discovered in the drivers/usb/gadget/function/rndis.c file within the Linux kernel before version 5.16.10. The RNDIS USB gadget does not include validation for the size of the RNDISMSGSET command. Attackers can obtain sensitive information from the kernel memory...

CVE-2026-77237

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77237

FreeRTOS-Kernel before version 11.3.1 contains a missing queue-set type validation in the xQueueAddToSet() function. On MPU-enabled ports with configUSE_QUEUE_SETS=1 , an unprivileged task can exploit this to read privileged kernel memory , crossing the memory protection boundary. The CVSS 3.1 sc...

CVE-2026-72195 fs/ntfs3: bound attr_off in UpdateResidentValue against data_off

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attroff in UpdateResidentValue against dataoff In doaction's UpdateResidentValue case fslog.c:3307, lrh-attroff and lrh-redolen come from the on-disk LRH. When they satisfy aoff + dlen res.dataoff, the assignment...

CVE-2026-72011 s390/diag: Add missing array_index_nospec() call to memtop_get_page_count()

In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing arrayindexnospec call to memtopgetpagecount 'level' is user space controlled and used to read from an array. Add the missing arrayindexnospec call to prevent speculative execution...