602 matches found
CVE-2022-37706-LPE-exploit
CVE-2022-37706 Hello guys, this time I'm gonna talk about a recent 0-day I found in one of the main window managers of Linux called Enlightenment https://www.enlightenment.org/. This 0-day gonna take any user to root privileges very easily and instantly. The exploit is tested on Ubuntu 22.04, but...
CVE-2022-37706
CVE-2022-37706 Exploit para CVE-2022-37706, un 0-day en uno de los principales gestores de ventanas de Linux - Enlightenment https://www.enlightenment.org/. Todo el crédito para MaherAzzouzi https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit. Esta es una copia del exploit para CTFs...
CVE-2024-30051
CVE-2024-30051 — EoP por desbordamiento de heap del DWM de Windows · Investigación de Tesis de Máster -orange Desbordamiento de búfer basado en heap en el Administrador de ventanas de escritorio de Windows dwmcore.dll Escalada de privilegios local → nivel de integridad SYSTEM a través del proceso...
CVE-2026-20805-PoC
🛡️ AI Security Tool Module CVE-2026-20805: Desktop Window Manager dwm.exe Memory Disclosure Official Security Audit Module for AI Security Tool Ecosystem...
Astra Linux – Vulnerability in Chromium
Integer overflow in the Window Manager in Google Chrome on the Chrome OS and Lacros before version 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out-of-bounds memory write via crafted UI interactions. Chrome security severity: Hig...
Astra Linux – Vulnerability in fly-wm
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...
Astra Linux – Vulnerability in Chromium
Before version 96.0.4664.93, using free after in the window manager in Google Chrome on ChromeOS allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
The vulnerability of desktop window managers in Windows operating systems allows attackers to increase their privileges.
The vulnerability of desktop window managers in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2026-65787
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-65786
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-65788
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-65788
CVE-2026-65788 is a use-after-free in Desktop Window Manager that enables local privilege escalation for an authorized user. Documented impact is elevation of privileges; CVSSv3.1 base score 7.0 (HIGH) with LOCAL attack, HIGH impact to confidentiality, integrity, and availability. Connected sourc...
EUVD-2026-56444
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-65787
The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...
CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability
...
EUVD-2026-56443
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-65786
CVE-2026-65786 is a heap-based buffer overflow in Desktop Window Manager that allows an authorized local attacker to elevate privileges. Affected: Desktop Window Manager on Windows. Root cause: heap-based overflow in DWM. Impact: local privilege escalation with high confidentiality/integrity/avai...