CVE-2026-89161

A flaw was found in PCRE2, a library for processing regular expressions. The pcre2jitmatch function, which handles just-in-time JIT compilation for regular expressions, incorrectly manages memory when processing certain inputs. This memory corruption vulnerability could allow a local attacker to...

DEBIAN-CVE-2026-89161

In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...

CVE-2026-89161

In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...

CVE-2026-89156

PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...

DEBIAN-CVE-2026-89156

PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...

CVE-2026-89161

In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...

CVE-2026-89161

In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...

EUVD-2026-75946

In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...

CVE-2026-89161

In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...

EUVD-2026-75942

PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...

CVE-2026-89156

PCRE2 before 10.48 is affected by an out-of-bounds read in pcre2_match that occurs after a JIT fallback when an attacker can supply invalid UTF data . The CVSS 3.1 score is 2.9 (Low) , reflecting a local attack vector with high complexity, no required privileges, and a limited availability impact...

CVE-2026-89156

PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...

CVE-2026-89156

PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...

Linux Distros Unpatched Vulnerability : CVE-2026-89156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data. CVE-2026-89156 Note that Nessus relie...

CVE-2026-10702

CVE-2026-10702 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as...

CVE-2021-21220

Exploitation of CVE-2021-21220 From Incorrect JIT Behavior to Remote Code Execution Overview This presentation explains the exploitation of CVE-2021-21220 , a vulnerability in Google Chrome’s V8 JavaScript engine caused by incorrect JIT compiler assumptions during optimization. The presentation...

pwn2own2018

Pwn2Own 2018: Safari + macOS macOS 10.13.3 向けの Safari RCE、サンドボックス脱出、およびカーネルへの LPE。 使用方法 nasm と tornado をインストールします: root@kitploit: brew install nasm pip3 install tornado ホスト名やポートを変更したい場合は config.py を確認してください。その後、./server.py でサーバーを起動し、表示された URL にアクセスしてください。 概要 このエクスプロイトチェーンは、Safari 内で実行される JavaScri...

RLSA-2026:65159 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74934 firefox: thunderbird: Privilege escalation in the Networking: Cookies component CVE-2026-74953 firefox: thunderbird:...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...