CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

CVE-2026-20524

A memory corruption vulnerability exists in apu due to improper input validation. This flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation can be addressed using Patch ID: ALPS11249004 (Issue ID: ...

EUVD-2026-92204

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171...

CVE-2026-20522

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172...

CVE-2026-20589

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606...

EUVD-2026-92207

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606...

CVE-2026-20589

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606...

CVE-2026-20589

A type confusion vulnerability in venc can lead to an out-of-bounds write . If a malicious actor has already obtained System privilege , this flaw could be exploited to achieve a local escalation of privilege . No user interaction is required for exploitation. Remediation is available via Patch I...

2009

2009 Linuxカーネルエクスプロイト - CVE-2009-1185 + CVE-2009-1337 + CVE-2009-2692 + CVE-2009-2698 + CVE-2009-3547...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE CVE-2025-7771에 대한 개념 증명PoC입니다. ThrottleStop.sys는 접근 통제 없이 임의의 물리 메모리 읽기/쓰기를 허용하는 두 개의 IOCTL 핸들러를 노출합니다. 즉, 관리자 권한을 가진 모든 프로세스가 물리 RAM 어디든 읽거나 쓸 수 있습니다. Windows 10 22H2 및 Windows 11 23H2 x64에서 테스트했습니다. 수행 내용 드라이버 바이너리를 IDA Pro에 로드하여 내부적으로 어떻게 동작하는지 파악하는 것부터...

CVE-2026-50656-rogueplanet-validation

RoguePlanet PoC 검증 보고서 - Microsoft Defender 보고서의 목적과 범위 본 보고서는 Microsoft Defender와 관련하여 공개적으로 설명된 RoguePlanet PoC의 검증에 관한 것입니다. 설명된 기술은 2026년 6월 10일 언론에서 LPE로컬 권한 상승로 발표되었으며, 로컬 사용자가 NT AUTHORITY\SYSTEM 권한을 얻을 수 있었습니다. 공개 설명에 따르면 이 메커니즘은 Microsoft Defender가 파일을 처리하거나 검사할 때 사용하는 기능을 활용합니다. 테스트의 목적...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 カーネル CVE-2026-43499 を悪用したローカル特権昇格 — rtmutex の removewaiter バグにより、struct rtmutexwaiter がウェイターのカーネル スタック上にダングリング状態で残される kernel/locking/rtmutex.c、CWE-416 use-after-free。NebuSec/CyberMeowfia IonStack/CVE-2026-43499、Apache-2.0 から Qualcomm Android 4.19.x...

CVE-2026-43499-pmg110-root

pmg110-root CVE-2026-43499 futex PI rtmutexwaiter use-after-free ローカル権限昇格、 OPPO PMG110 / K15 Pro+ — MediaTek MT6991、ColorOS 16 向けに移植。 プッシュするファイルは 1 つだけ。LDPRELOAD で実行します： adb push out/preload-pmg110-16.0.9.400.so /data/local/tmp/preload.so adb shell chmod 644 /data/local/tmp/preload.so adb shell...

PT-2026-104702

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143...

CVE-2026-58880: Concurrent Execution using Shared Resource with Improper Synchronization

In handleappvalresponse of btifrc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49885: Integer Overflow or Wraparound

In rwt4tupdatefile of rwt4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-104689

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217...

PT-2026-104709

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606...

PT-2026-104693

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11296678; Issue ID: MSV-9167...

PT-2026-106156

In stpropnci process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...