CVE-2026-31431

CVE-2026-31431 - 개념 증명PoC Linux algifaead 페이지 캐시 쓰기를 통한 루트 권한 상승 - 로컬 권한 상승 익스플로잇 라이트업Writeup https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170 참고 사항 PoC는 공개된 참고 자료를 기반으로 작성되었으며, 아직 완전히 테스트되지 않았습니다. 문제가 발생할 경우 알려주시기 바랍니다: [email protected]...

audit-kernel

리눅스 커널 감사 하위 시스템 https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel Linux Audit 하위 시스템은 보안 관련 이벤트를 캡처하고 기록하는 데 사용되는 안전한 로깅 프레임워크를 제공합니다. 이 하위 시스템은 시스템 활동을 기반으로 감사 레코드를 생성하는 커널 구성 요소, 이러한 레코드를 로컬 파일 또는 원격 집계 서버에 기록하는 사용자 공간 데몬, 그리고 감사 로그 검...

UBUNTU-CVE-2026-80807

In the Linux kernel, the following vulnerability has been resolved: n...

UBUNTU-CVE-2026-80875

In the Linux kernel, the following vulnerability has been resolved: i...

CVE-2026-80532

In the Linux kernel, the following vulnerability has been resolved: xfs: fix another iunlink infinite loop bug in online fsck xrepiunlinkresolvebucket is supposed to reconstruct as much of the incore prev and next unlinked list pointers based on what it finds on disk and in memory before we move ...

CVE-2026-80533

In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agibp to rebuild the unlinked inode lists. Unfortunately, it's possible f...

The vulnerability of the nfsd components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsd component in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-72221

A flaw was found in the kernel. A race condition exists in the sunrpc component during the Transport Layer Security TLS handshake cancellation process. This can lead to the corruption of an internal data structure, potentially causing system instability or a denial of service. Additionally, it ma...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-63909

A flaw was found in the ksmbd component of the Linux kernel. A transposed bounds check in the smbcheckpermdacl function can lead to a 2-byte heap out-of-bounds OOB read during Server Message Block SMB2 create operations. This vulnerability may allow a remote attacker to disclose sensitive...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the Win32k.sys component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2026-50325 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-49805 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-33840

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

Microsoft Win32k 资源管理错误漏洞

Microsoft Win32k is a system file used by Microsoft for multi-user management in Windows operating systems. There is a resource management vulnerability in Microsoft Windows Win32K-ICOMP. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are...

CVE-2026-4747

CVE-2026-4747 is a FreeBSD vulnerability in the RPCSEC_GSS implementation (kgssapi.ko) where svc_rpc_gss_validate() copies attacker-controlled data into a 128-byte stack buffer without enforcing size, enabling a 304-byte overflow when credential bodies up to 400 bytes are supplied. This can lead ...

Security Bypass Vulnerability in Multiple Apple Products (CNVD-2026-14492)

Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets. A security bypass vulnerability exists in multiple Apple products and is caused by a logic issue in a kerne...

CVE-2026-21928

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability can...

PT-2026-2662

Name of the Vulnerable Software and Affected Versions Windows versions prior to the patchday containing the fix. Description A type confusion issue exists within the Windows Win32K ICOMP component. This allows a locally authorized attacker to gain elevated privileges. The issue involves accessing...