CVE-2026-84536

CVE-2026-84536 is an integer underflow in the SMB implementation on macOS, fixed through improved input validation in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . Connecting to a malicious SMB server may lead to unexpected system termination (crash/denial of service). The ro...

EUVD-2026-77995

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts CVE-2019-12255、CVE-2019-12256、CVE-2019-12258、およびCVE-2019-12260を検出するためのSuricata LUAスクリプト CVE-2019-12255 このスクリプトはCVE-2019-12255をチェックします。チェックされるパケットにはPSH、ACK、URGフラグが設定され、ペイロードサイズが1500バイトを超えている必要があります。次に、緊急ポインタの値が0に設定されているかどうかを確認します。これにより、影響を受けるデバイスで整数アンダーフローが発生します。...

CVE-2020-1349

CVE-2020-1349 この脆弱性は、韓国語版Windows 10 1909 x64（コードページ949）にインストールされたOutlook 2019（16.0.12624.20424）で発生します。 TLDR; この脆弱性を使用してASLRを回避することはできませんでしたが、起動時に固定されるシステムライブラリのアドレスを使用して、Outlook 2019 32bit版で電卓を起動するエクスプロイトを作成しました。 また、この脆弱性はゼロクリック脆弱性です。"outlook.com"以外のメールサービスのアカウントがIMAPを使用してOutlook...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Regulator: Core – Prevent integer underflow By using a ratio of delay to pollEnabledTime that is not an integer, timeRemaining underflows may occur, causing the loop not to exit as expected. Since delay can be derived from DT, an...

Astra Linux – Vulnerability in p7zip

Ppmd7.c in 7-ZIP before 23.00 allows for integer underflow and invalid read operations due to a crafted 7Z archive...

Astra Linux – Vulnerability in WebKit2GTK

A flaw was discovered in WebKitGTK and WPE WebKit. This vulnerability allows for an out-of-bounds read and integer underflow, resulting in a UIProcess crash DoS through a crafted payload sent to the GLib remote inspector server...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tipc: Fixed the underflow of bcackers when duplicate GRPACKMSG messages occur. The GRPACKMSG handler in tipcgroupprotorcv currently decrements bcackers for every inbound group ACK, even when the same member has already acknowledg...

Astra Linux – Vulnerability in xrdp

XRDPT is an open-source remote desktop protocol RDP server. In affected versions, an integer underflow leading to a heap overflow in the SESMAN server allows any unauthenticated attacker who can access the SESMAN server locally to execute code as root. This vulnerability has been patched in versi...

Astra Linux – Vulnerability in u-boot

A issue was discovered in Das U-Boot during the period from 2019.07. There is an unbounded memcpy operation when parsing a UDP packet, due to an underflow of the netprocessreceivedpacket integer value during the ncinputpacket call...

Windows-CVE-2024-38063

Windows-TCP/IP-IPv6CVE-2024-38063 漏洞CVE-2024-38063是存在于Windows操作系统TCP/IP组件中的远程代码执行漏洞。根据微软官方介绍，该漏洞最高严重等级为严重，CVSS 评分为 9.8，Windows 系统的多个版本受此漏洞影响。攻击者可利用该漏洞实现远程代码执行。 漏洞原理 漏洞成因在于 Windows 操作系统 TCP/IP 组件中存在整数下溢漏洞，未经身份验证的攻击者可重复向 Windows 计算机发送 IPv6 数据包（包括特别构建的数据包），从而实现远程代码执行。 POC已公布...

CVE-2026-42980-POC

CVE-2026-42980 Public Disclosure This repository contains the public disclosure material for CVE-2026-42980 , a Windows kernel WMI integer-underflow vulnerability that can be exploited for local privilege escalation to NT AUTHORITY\SYSTEM on vulnerable lab builds. Full write-up English article...

CVE-2022-0185-Case-Study

CVE-2022-0185-Case-Study このケーススタディは、ECE 9069: Introduction to Hacking の課題の成果物です: https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 概要 CVE-2022-0185 は、Linux カーネルの Filesystem Context 機能の legacyparseparam...

CVE-2019-14287-write-up

CVE-2019-14287-解説 4294967295 Sudo のバグにより、制限されたユーザーが root としてコマンドを実行できる 脆弱性のデモ 新しいユーザーを追加: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // ユーザーにパスワードを追加 visudo 新しいエントリを追加 test ALL=ALL, !root /usr/bin/id // このユーザーは root ユーザーで id コマンドを使用できないように指定 ファイルを保存し、root ユーザーからログアウト...

CVE-2022-0185-POC

CVE-2022-0185 — 概念验证 针对 CVE-2022-0185 的概念验证漏洞利用程序，该漏洞是 Linux 内核 legacyparseparam 函数（fs/fscontext.c）中基于堆的缓冲区溢出，允许本地非特权用户将权限提升至 root。 原始漏洞利用来自 Crusaders of Rust。完整文章：https://www.willsroot.io/2022/01/cve-2022-0185.html 漏洞 该漏洞是 legacyparseparam 内部边界检查中的整数下溢。当内部缓冲区 size 达到 4095 字节时，无符号减法发生回绕并绕过检查，从而在...

CVE-2026-89640

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. When performing a file range remapping operation with a zero length, an integer underflow can occur if the offset exceeds the file size. This can lead to corruption of the byte count in file system control...

Linux Distros Unpatched Vulnerability : CVE-2026-89551

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: xdrbuftrim: clamp buf-len to avoid underflow xdrbuftrim trims len bytes from the tail of an xdrbuf by walking the tail, pages, and head iovecs. Each...

Linux Distros Unpatched Vulnerability : CVE-2026-89606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted...

Linux Distros Unpatched Vulnerability : CVE-2026-89524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6klcfg80211connectevent subtracts fixed IE offsets from assocreqlen -= 4 and...

Linux Distros Unpatched Vulnerability : CVE-2026-89526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the...