EUVD-2026-93793

Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106358

Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106197

Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106382

A Use after free vulnerability in the Chromecast component of Google Chrome (versions prior to 155.0.8059.39 ) allows a remote attacker to execute arbitrary code outside the sandbox. The attack can be initiated by navigating to a crafted HTML page . No specific exploit links or details are provid...

EUVD-2026-93795

Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-27398

CVE-2024-27398 CVE-2024-27398 PoC 📍 GDB 중단점 GNU gdb Ubuntu 12.1-0ubuntu122.04.2 12.1 Copyright C 2022 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law...

CVE-2026-56906

A use-after-free vulnerability exists in the ep_free function of eventpoll.c , caused by a race condition . Additionally, memory corruption via use-after-free was identified in ep_get_upwards_depth_proc within fs/eventpoll.c . This flaw could allow for local escalation of privilege without requir...

EUVD-2026-93787

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56906

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55330

A use-after-free vulnerability exists in the BluetoothCccHandlerCallbackImpl function within the bluetooth_ccc.cc file due to a logic error. This flaw could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. While the specific...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-93786

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 ダブルフリー 影響を受ける: Apache HTTP Server 2.4.66 の modhttp2 + Event MPM 修正バージョン: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — 認証なしのリモートコード実行の可能性 CWE: CWE-415 ダブルフリー 脆弱性の概要 Apache 2.4.66 の modhttp2 には、h2mplx.c:mstreamcleanup 内にダブルフリーのバグがあります。この問題は、クライアントが同じストリーム上で...

bincat

소개 BinCAT이란 무엇인가? BinCAT은 정적 바이너리 코드 분석 도구 키트로, 리버스 엔지니어가 IDA에서 직접 또는 Python을 사용하여 자동화할 수 있도록 설계되었습니다. 주요 기능: 값 분석 레지스터 및 메모리 오염 분석 taint analysis 타입 재구성 및 전파 역방향 및 순방향 분석 use-after-free 및 double-free 탐지 실제 작동 모습 이전 버전의 BinCAT의 실제 작동 모습을 확인할 수 있습니다: 기본 분석 데이터 오염 사용하기 해당 작업에 대한 내용은 튜토리얼을 확인하세요. 간단...

CVE-2026-23111

CVE-2026-23111 감사 도구 리눅스 커널 nftables UAF 이 저장소는 리눅스 환경에서 CVE-2026-23111 취약점을 심층적이고 정확하게 평가하기 위해 설계된 Bash 기반 자동화 감사 스크립트를 포함합니다. 🔍 CVE-2026-23111 취약점이란? CVE-2026-23111 은 리눅스 커널의 nftables 서브시스템에서 발견된 Use-After-Free UAF 유형의 취약점입니다 일반적으로 6.13 브랜치 이전의 개발 및 안정 버전에 영향을 미칩니다. 결함은 캡처된 요소 활성화...

CVE-2019-2215

Bad-Binder CVE-2019-2215 다음은 x86 에뮬레이터에서 테스트된 bad binder CVE-2019-2215 취약점에 대한 익스플로잇입니다. 목표는 UAF 취약점을 악용하여 AAR 프리미티브를 트리거해 커널 주소를 누출하고, AAW 프리미티브를 사용하여 addrlimit을 덮어씀으로써 커널 읽기 및 쓰기 프리미티브를 확보한 뒤, 로컬 권한 상승 LPE을 위해 credstruct를 수정하는 것이었습니다. 크레딧...

CVE-2026-80842

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

CVE-2026-80850

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. An unprivileged local attacker could exploit a race condition when a network device is detached from its Virtual Routing and Forwarding VRF interface. This could lead to a use-after-free vulnerability, causing...

CVE-2026-80837

A flaw was found in the Linux kernel. A race condition exists in the netfilter's nftables subsystem when handling packet path object notifications. This can lead to a use-after-free vulnerability, allowing a local or remote attacker to send specially crafted packets, potentially causing a denial ...