EUVD-2026-78104

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel...

pwn2own2020

Comprometiendo el kernel de macOS a través de Safari encadenando seis vulnerabilidades Resumen Este repositorio contiene los detalles técnicos y de explotación de nuestra propuesta ganadora del Pwn2Own 2020 que apuntaba a Apple Safari con una escalada de privilegios del kernel para macOS 10.15.3...

cve-2026-43499-firetv-sheldonp-writeup

Amazon Fire TV Stick 3rd Gen（sheldonp）上的 CVE-2026-43499 将 Linux 内核提权链接到 preloader 降级与 bootloader 解锁。 概述 本仓库记录了我对 Amazon Fire TV Stick 3rd Gen（sheldonp）上 CVE-2026-43499 利用链的授权复现。该利用链使用临时内核 root 执行受控的 preloader 降级，然后使用现有的 Kamakiri BootROM 工作流进入已解锁的 fastboot 并完成 bootloader 解锁。 这是一次复现和针对特定设备的案例研究。我并未...

Pixel_GPU_Exploit

Mali GPU 内核 LPE 本文深入分析了 Mali GPU 中的两个内核漏洞，这些漏洞可从默认应用沙箱中触达，由我独立发现并报告给 Google。文中包含一个可实现任意内核读写（r/w）能力的内核利用程序。该利用程序可禁用 SELinux，并在运行以下 Android 14 版本的 Google Pixel 7 和 8 Pro 机型上提权至 root： Pixel 8 Pro: google/husky/husky:14/UD1A.231105.004/11010374:user/release-keys Pixel 7 Pro:...

OHTS

OHTS Microsoft Windows - 'afd.sys' 本地内核权限提升漏洞利用报告 CVE-2011-1249...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 po...

ghostlock-apk

GhostLock APK 独立 APK：CVE-2026-43499 GhostLock 内核提权 + Shizuku shell 身份执行。 前置条件 荣耀 AAK-AN00 / MagicOS 10 / Linux 6.6.89 / 4KB 页 已安装 Shizuku 并以 adb 方式启动（adb shell sh /sdcard/Android/data/moe.shizuku.privileged.api/start.sh） USB 调试已授权 工作原理 1. Shizuku UserService ：APK 启动后向 Shizuku 申请 UserService，当...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Exploit for Use After Free in Google Android

CVE-2019-2215 Temproot for Pixel 2 and Pixel 2 XL via CVE-...

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

CVE-2026-10682

The userspace verifier zvrfylogfilterset for the logfilterset syscall in subsys/logging/logmgmt.c performed a signed comparison against the int16t srcid parameter: srcid int16tlogsrccntgetdomainid. Any negative value for srcid e.g. -1 trivially satisfied this check and was forwarded into...

KB5101650: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (July 2026)

The remote Windows host is missing security update 5101650. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

USN-8501-1: Linux kernel vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

CVE-2026-45250 Stack buffer overflow via setcred(2)

The setcred2 system call is only available to privileged users. However, before the privilege level of the caller is checked, the user-supplied list of supplementary groups is copied into a fixed-size kernel stack buffer without first validating its length. If the supplied list exceeds the capaci...

Exploit for CVE-2026-45250

FreeBSD setcred2 — research artifacts This subdirectory col...

Astra Linux – Vulnerability in Linux 5.10

In TBD of TBD, there is a potential use-after-free due to a race condition. This could lead to a local escalation of privileges in the kernel, as execution privileges are required. User interaction is not necessary for exploitation. Product: Android Versions: Android kernel Android ID: A-21951397...

darksword-Exploit

🗡️ DarkSword — iOS Full-Chain Exploit Analysis Reference:...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

EUVD-2026-29215

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2026-28819

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to execute arbitrary code with kernel privileges...