CVE-2018-8897

CVE-2018-8897 POP SS 취약점CVE-2018-8897의 데모 익스플로잇으로, 커널 권한으로 서명되지 않은 코드 실행으로 이어집니다. KVA Shadowing을 비활성화하고 해당 보안 업데이트를 제거해야 합니다. 이는 특정 하이퍼바이저예: VMWare에서는 INT3 후 보류 중인 DB를 폐기하므로 작동하지 않을 수 있습니다. 상세 설명: https://blog.can.ac/2018/05/11/arbitrary-code-execution-at-ring-0-using-cve-2018-8897/ 결과:...

acceleratortroll

AcceleratorTroll™ CVE-2023-28206을 악용하여 유용한 것을 만듭니다. 로드맵 현재, 우리는 이 취약점이 어떻게 작동하는지, 그리고 패닉 외에 다른 용도로 어떻게 악용할 수 있는지 여전히 이해하려고 노력 중입니다. 취약점을 사용하여 커널 권한을 획득할 수 있음을 증명합니다. krw 익스플로잇을 획득합니다. SSH 서버를 실행합니다. 서명되지 않은 코드 또는 위조 서명된 코드를 실행할 수 있도록 허용합니다. UICache를 제어하여 앱을 설치합니다. 크레딧 기여자: 앱 제작: Jan 로고 제작: iframe...

CVE-2026-47548

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an out-of-bounds write vulnerability within the kernel mode layer to corrupt system memory. Successful exploitation could allow an attacker to achieve arbitrary code execution with elevated kernel privileges, trigger a...

ios.CVE-2026-84616-84607

AppleAVE2 CVE 연구 — iOS 27.0 !IMPORTANT 이 저장소는 AI 에이전트의 연구 지원을 받았습니다 !NOTE 공개 연구 기여를 환영합니다 CVE-2026-84607 AVEVideoEncoder 경쟁 조건 → 커널 권한: 수정 위치를 찾아내다 이것은 무엇인가 iOS 27.0 권고 149034, 구성 요소 AVEVideoEncoder : "샌드박스된 앱이 커널 권한으로 임의 코드를 실행할 수 있음" — "경쟁 조건이 개선된 상태 관리로 해결되었습니다." 이 글은 수정이 어디에 있는지, 그리고 무엇을 하는지를...

PT-2026-102758

Name of the Vulnerable Software and Affected Versions Azure RTOS affected versions not specified Description In builds with TX ENABLE EVENT TRACE enabled, a user-mode, memory-protected module using TXM MODULE USER MODE | TXM MODULE MEMORY PROTECTION can register an arbitrary function pointer as t...

CVE-2026-84607

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel...

CVE-2026-84506

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to execute arbitrary code with kernel privileges...

CVE-2026-84607

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel...

CVE-2026-84607

A race condition exists in the AVEVideoEncoder component of Apple's operating systems, which was addressed with improved state management. A sandboxed application could potentially exploit this vulnerability to execute arbitrary code with kernel privileges . The issue has been resolved in iOS 26....

CVE-2026-84506

A use after free vulnerability exists in macOS due to improper memory management. If successfully exploited, an application may be able to execute arbitrary code with kernel privileges . This issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . Exploitation details...

EUVD-2026-78051

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to execute arbitrary code with kernel privileges...

CVE-2026-84506

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to execute arbitrary code with kernel privileges...

CVE-2026-84506: Use After Free

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to execute arbitrary code with kernel privileges...

CVE-2026-84607: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel...

PT-2026-91571

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A use after free issue, which occurs when a program continues to use a pointer after it has been freed, can be exploited...

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

CVE-2026-64747

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to execute arbitrary code with...

EUVD-2026-49539

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2026-64747

CVE-2026-64747 identifies a buffer overflow vulnerability in the AppleAVE2 video encoder kernel extension (com.apple.driver.AppleAVE2). The root cause is a 32-bit LRB work-buffer size calculation error within the HEVC 10-bit multipass path . This flaw allows an application to execute arbitrary co...