CVE-2026-106377

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-56906

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56906

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56906

A use-after-free vulnerability exists in the ep_free function of eventpoll.c , caused by a race condition . Additionally, memory corruption via use-after-free was identified in ep_get_upwards_depth_proc within fs/eventpoll.c . This flaw could allow for local escalation of privilege without requir...

EUVD-2026-93787

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-80842

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

CVE-2026-80850

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. An unprivileged local attacker could exploit a race condition when a network device is detached from its Virtual Routing and Forwarding VRF interface. This could lead to a use-after-free vulnerability, causing...

CVE-2026-80837

A flaw was found in the Linux kernel. A race condition exists in the netfilter's nftables subsystem when handling packet path object notifications. This can lead to a use-after-free vulnerability, allowing a local or remote attacker to send specially crafted packets, potentially causing a denial ...

CVE-2026-80778

A flaw was found in the Linux kernel. A race condition exists in the futex/pi Fast Userspace Mutexes / Priority Inheritance subsystem. When a private futex key borrows a waiter's memory management mm structure without proper referencing, the attachtopiowner function can accept an owner from a...

CVE-2026-89791

A flaw was found in the Linux kernel's perf subsystem. A race condition exists between the perf mmap revival and the last munmap operation. This allows a local unprivileged user to exploit a use-after-free vulnerability, leading to local privilege escalation to root...

CVE-2026-89811

A flaw was found in the Linux kernel's drm/amdkfd component. This vulnerability arises from a race condition where the Micro Engine Scheduler MES fails to perform a necessary Translation Lookaside Buffer TLB invalidation after unmapping queues. This oversight allows in-flight Direct Memory Access...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation 对 CVE‑2025‑62215 的实战分析，这是一种已在野外被利用的 Windows 内核竞态条件。演示了提权至 SYSTEM、检测脚本以及面向企业防御者和红队成员的补丁验证策略。 CVE 2025 62215 – Windows 内核权限提升漏洞利用 执行摘要 CVE‑2025‑62215 是一种经过身份验证的 Windows 内核漏洞利用，攻击者通过滥用内存处理程序中的竞态条件，可以一路提升至 SYSTEM...

CVE-2021-3899_PoC

CVE-2021-3899 PoC 再現手順 0. 古いバージョンのapportをインストールします: sudo apt-get install apport=2.20.11-0ubuntu27 2.20.11-0ubuntu27.10以下の任意のバージョンで構いませんが、ソースコードをダウンロードする必要があります 1. 任意 pidmaxを小さく設定します。そうしないと、pidロールバックの準備に時間がかかります。echo 10000 | sudo tee /proc/sys/kernel/pidmax 2. 誰でもrootとしてpingを実行できるようにします:...

Exploit for Privilege Chaining in Canonical Ubuntu_Linux

CVE-2026-3888 - snap-confine - Escalacion de Privilegios a Roo...

USN-8887-1: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

Exploit for Race Condition in Apple Ipados

CVE-2026-43805 — IOKit IODMACommand DriverKit RPC race A on...

WS_RaceCondition_PoC

WebSocket 中的竞态条件 在信息技术领域，确保数据的可靠性和完整性至关重要，尤其是在涉及数百万用户和数 TB 数据的情况下。然而，随着软件系统变得越来越复杂，诸如竞态条件之类的问题可能会出现，严重影响系统运行并导致不可预测的结果。 什么是竞态条件？ 竞态条件是多任务程序中出现的错误，当两个或多个线程或进程在没有同步的情况下同时尝试修改共享数据或资源时就会发生。这可能导致意外且不可预测的结果，因为操作的执行顺序取决于哪些线程或进程先完成。由于其不可预测的特性，检测竞态条件是软件系统中的一个棘手问题。 来源与延伸阅读： 维基百科上的“Race Condition” James...

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

gemini-2.5-pro-nf-tables-red-teaming

Gemini 2.5 Pro nftables 红队测试案例研究（CVE-2023-32233） LLM 安全研究 | 负责任的披露 | AI 对齐评估 研究人员 : Niranj R Mahaswar Destawell Google AI 漏洞奖励计划 : 889286 — 超出范围 摘要 本仓库记录了一项针对前沿模型的比较性 LLM 红队测试 实验，该实验围绕 Linux 内核漏洞 CVE-2023-32233 （nftables 竞态条件 / 释放后使用）的技术原语展开。 关键结果（2026 年 4 月 27 日） ： Gemini 2.5 Pro 生成了相关技术输出，而...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps CVE-2025-54918（Windows NTLM の欠陥）のシミュレーションされた悪用と緩和策。検出スクリプト、Ansible パッチ適用、CI/CD 強化が含まれます。ハイブリッドクラウド環境における低レベルアクセスから SYSTEM への権限昇格を示します。 Mark Mallia 著 はじめに: クリックから制御へ – CVE-2025-55226 と CVE-2025-54918 の連鎖...