CVE-2025-14174-analysis

CVE-2025-14174 Analysis: ANGLE Metal Staging Buffer Out-of-Bounds Write Technical analysis and proof-of-concept for CVE-2025-14174 | ---|--- CVE| CVE-2025-14174 Severity| High Exploited ITW| Yes - targeted attacks on iOS 26 Affected| iOS Safari, macOS Chrome/Chromium/Electron not macOS Safari...

CVE-2026-9999-exploit

CVE-2026-9999 — Chrome ANGLE/Metal WebGL PoC 漏洞挖掘工具（macOS） 1. 漏洞摘要 字段| 值 ---|--- CVE| CVE-2026-9999 厂商 / 产品| Google Chrome 受影响版本| Chrome 148.0.7778.216，仅限 macOS 1 修复版本| 148.0.7778.216 1 影响| 通过特制 HTML 页面在沙箱内 执行任意代码 1 Chromium 严重级别| 高 1 CVSS 3.1（CISA-ADP）| 8.8 高危 —...

Exploit for Improper Privilege Management in Google Chrome

CVE-2026-9999 — Chrome ANGLE/Metal WebGL PoC Hunting Harness...

The vulnerability of the vllm-metal inference backend component of the Docker Desktop Docker Model Runner plugin allows a attacker to execute arbitrary code.

The vulnerability of the vllm-metal inference backend component of the Docker Desktop Docker Model Runner plugin is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

PT-2026-42830

Name of the Vulnerable Software and Affected Versions Docker Model Runner on macOS affected versions not specified Description The vllm-metal inference backend unconditionally sets trust remote code=True when loading model tokenizers and operates without sandboxing. This allows the...