CVE-2025-3464-AsIO3-LPE

CVE-2025-3464-AsIO3-LPE CVE-2025-3464: Unprivileged LPE exploit for ASUS AsIO3.sys - TOCTOU auth bypass + PreviousMode decrement CVE-2025-3464: AsIO3.sys Local Privilege Escalation This exploit will only work on Windows 11 22H2 or earlier. Microsoft fixed PreviousMode hijinks. Local privilege...

CVE-2026-73497

MCP Atlassian (a Model Context Protocol server for Confluence and Jira) versions 0.17.0 through 0.22.0 contain a DNS-rebinding TOCTOU bypass of its SSRF protection. The validate_url_for_ssrf function resolves the attacker-controlled X-Atlassian-Jira-Url or X-Atlassian-Confluence-Url header hostna...