CVE-2017-5123

CVE-2017-5123 waitid システムコールを利用した Linux 権限昇格。このエクスプロイトは @XeR0x2A と @chaignc によって HexpressoTeam から提供されており、 教育目的のみで使用されます。 このバグは2017-05-21に導入され、2017-10-09に修正されました。4.14.0-rc4+ は既知の脆弱性が あります。 asciicast 初級者または中級者のエクスプロイト作成者であれば、私たちの実装を読む前に 自分でエクスプロイトしてみることをお勧めします。簡単なエクスプロイトプリミティブ...

cve-2014-0038

Local root exploit for CVE-2014-0038 Bug: The X86X32 recvmmsg syscall does not properly sanitize the timeout pointer passed from userspace. Exploit primitive: Pass a pointer to a kernel address as timeout for recvmmsg, if the original byte at that address is known it can be overwritten with known...

CVE-2026-19185 Unvalidated user-supplied buffer pointers in the I3C do_ccc system call handler allow kernel memory read/write from user mode

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

CVE-2012-6422

Exynos Exploit 이전 삼성 휴대폰에 도입된 /dev/exynos-mem 취약점을 악용하기 위한 POC입니다. 커널 취약점 연구에 대한 관심과 CTF 챌린지의 일환으로 만들어졌습니다. 익스플로잇 이 휴대폰들에 도입된 취약점은 exynos-mem 장치에 대한 권한입니다. 비루트 사용자조차도 R/W를 모두 허용했습니다! exynos-mem 장치는 /dev/mem에 직접 읽기/쓰기를 할 수 있게 해주는 장치로, 커널 코드/데이터에 직접 쓸 수 있음을 의미합니다. /proc/iomem을 활용하면 운영 체제에서 어떤 물리 주소...

CVE-2017-5123

README 참고 : 이 저장소의 코드는 kata containers와 같은 보안 팟 샌드박스 기술의 격리를 시연하기 위한 것이며, 어떤 플랫폼을 공격하려는 의도가 아닙니다. 재현 방법 리눅스 커널 4.13.0 획득 0001-CVE-2017-5123-help-to-make-attack-safely.patch 패치 적용 Kconfig 구성으로 리눅스 커널 빌드 커널 부팅 후 다음 명령어로 dacmmapminaddr, havecanforkcallback, preparekernelcred, commitcreds, setfsroot,...

CVE-2026-20687-AppleJPEGDriver-UAF

CVE-2026-20687 — AppleJPEGDriver startDecoder 타임아웃 UAF CVE-2026-20687 · Enfilade · enfilade.io 구성 요소: 커널 영향: 앱이 예기치 않은 시스템 종료를 유발하거나 커널 메모리에 쓰기를 수행할 수 있습니다. 설명: 향상된 메모리 관리를 통해 use after free 문제가 해결되었습니다. —Apple 보안 콘텐츠, iOS 26.4 및 iPadOS 26.4 대상 | ---|--- iOS| 26.3 23D125 테스트 완료 macOS| — 구성 요소|...

CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Multiple Local Privilege Escalation Vulnerabilities in Little Orbit GFAC Driver GFACSysx64.sys | ---|--- CVE IDs| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Vendor| Little Orbit Product| GamersFirst Anti-Cheat GFAC Driver GFACSysx64.sys Affected Versions| No version information is embedded in...

CVE-2026-43805-PoC

CVE-2026-43805: IODMACommand 상태 경쟁 분석 및 PoC Apple IOKit의 IODMACommand::PerformOperationImpl에서 빠져 있던 상태 락을 macOS 26.5/26.6 커널 바이너리 diff로 찾아낸 분석입니다. 취약 빌드에서는 PerformOperation이 준비 상태와 메모리 디스크립터를 사용하는 동안 CompleteDMA가 같은 상태를 해제할 수 있습니다. 26.6 패치는 두 경로가 이미 공유하던 fDextLock을 PerformOperationImpl에도 적용합니다. 검...

CVE-2026-17052 Missing user-pointer validation in tgpio_pin_read_ts_ec syscall handler allows arbitrary supervisor-memory write from userspace

The Time-aware GPIO syscall verification handler zvrfytgpiopinreadtsec in drivers/timeawaregpio/timeawaregpiohandlers.c validated only the port device object and passed the caller-supplied timestamp and eventcount output pointers to the driver without a KSYSCALLMEMORYWRITE check. The other handle...

CVE-2026-65357

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2026-84523

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination ...

CVE-2026-65357

A memory handling vulnerability exists in iOS 26.6 , iPadOS 26.6 , macOS Tahoe 26.6 , tvOS 26.6 , visionOS 26.6 , and watchOS 26.6 . The root cause is related to improper memory handling, which could allow a malicious app to cause unexpected system termination or perform a kernel memory write . R...

CVE-2026-65357

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2026-65357

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...

EUVD-2026-77883

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2026-84619

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or write kernel memory...

PT-2026-91587

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 tvOS versions prior to...

CVE-2026-65357: Buffer Copy without Checking Size of Input

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2026-84523: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination ...

CVE-2026-84619: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or write kernel memory...