EUVD-2026-89173

Attacker model / Preconditions: a loaded TXMMODULEUSERMODE | TXMMODULEMEMORYPROTECTION module issuing kernel dispatch calls, on a build with TXENABLEEVENTTRACE. A user-mode, memory-protected module can register an arbitrary function pointer as the global trace-full callback. The kernel calls it...

ghostlock-apk

GhostLock APK APK independiente: escalada de privilegios del kernel CVE-2026-43499 GhostLock + ejecución bajo la identidad de shell de Shizuku. Requisitos previos Honor AAK-AN00 / MagicOS 10 / Linux 6.6.89 / páginas de 4 KB Shizuku instalado e iniciado vía adb adb shell sh...

ITScape

ITScape: Escape de invitado a anfitrión en KVM/arm64 Resumen Este documento describe la vulnerabilidad ITScape CVE-2026-46316 reportada y parcheada por Hyunwoo Kim @v4bel. Es una vulnerabilidad de escape de KVM que permite a un invitado escapar al anfitrión en un entorno KVM/arm64 y ejecutar...

Pixel_GPU_Exploit

Mali GPU Kernel LPE This article provides an in-depth analysis of two kernel vulnerabilities within the Mali GPU, reachable from the default application sandbox, which I independently identified and reported to Google. It includes a kernel exploit that achieves arbitrary kernel r/w capabilities...

pwn2own2020

Comprometiendo el kernel de macOS a través de Safari encadenando seis vulnerabilidades Resumen Este repositorio contiene los detalles técnicos y de explotación de nuestra propuesta ganadora del Pwn2Own 2020 que apuntaba a Apple Safari con una escalada de privilegios del kernel para macOS 10.15.3...

cve-2026-43499-firetv-sheldonp-writeup

CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...

OHTS

OHTS Microsoft Windows - Informe de exploit de escalada de privilegios del kernel local 'afd.sys' CVE-2011-1249...

EUVD-2026-78104

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel...

PT-2026-91654

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 po...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados

CVE-2026-65330 — tmpfs setxattr PAC Bypass Component: XNU...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Exploit for Use After Free in Google Android

CVE-2019-2215 Temproot for Pixel 2 and Pixel 2 XL via CVE-...

CVE-2026-53996: Missing Authorization

NetBSD's hdaudio4 driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIOFGRPSETCONFIG ioctl without elevated permissions by exploiting the absence of an access check on /dev/hdaudioN device nodes. Attacker...

Photon OS 5.0: Linux PHSA-2025-5.0-91-0538

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the `execve` system call in FreeBSD’s kernel allows a hacker to gain full control over the system.

The vulnerability of the execve system call in FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain full control over the system...

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

CVE-2026-10682

The userspace verifier zvrfylogfilterset for the logfilterset syscall in subsys/logging/logmgmt.c performed a signed comparison against the int16t srcid parameter: srcid int16tlogsrccntgetdomainid. Any negative value for srcid e.g. -1 trivially satisfied this check and was forwarded into...

KB5101650: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (July 2026)

The remote Windows host is missing security update 5101650. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...