CVE-2016-3308

利用 CVE-2016-3308 破坏 win32k 桌面堆 作者：@55-AA，2016年9月18日 介绍 桌面堆是一个由 win32k 使用的内核池，可以被用户态应用程序利用。这里我将详细描述如何实现一个可靠的利用，从而在内核中读写任意地址。本文及相关的分析基于 win7sp1x86（build 17842）环境。 漏洞 2016年8月9日，微软发布了 MS16-098。漏洞代码位于函数 win32k!xxxInsertMenuItem 中，函数原型如下： BOOL xxxInsertMenuItem PMENU pMenu, UINT wIndex, BOOL fByPositio...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS version 17.4 and iPadOS version 17.4, which originates from an...

CVE-2022-32844

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app with arbitrary kernel read and write capability may be able to bypass Pointer Authentication...