CVE-2026-113421

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full callback when the module is stopped and unloaded. With event tracing enabled and a kernel-owned trace buffer still active, a later buffer wrap invokes the callback from privileged...

CVE-2026-113421 ThreadX Modules invokes trace-full callbacks after module unload

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full callback when the module is stopped and unloaded. With event tracing enabled and a kernel-owned trace buffer still active, a later buffer wrap invokes the callback from privileged...

EUVD-2026-115717

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full callback when the module is stopped and unloaded. With event tracing enabled and a kernel-owned trace buffer still active, a later buffer wrap invokes the callback from privileged...

CVE-2026-113421

Eclipse ThreadX versions 6.0.1 through 6.5.2.202603 are vulnerable to a Use After Free (CWE-416) issue within ThreadX Modules . The flaw occurs because the system fails to revoke a module's trace-buffer-full callback upon stopping and unloading the module. If event tracing is enabled and a kernel...

CVE-2026-113421 ThreadX Modules invokes trace-full callbacks after module unload

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full callback when the module is stopped and unloaded. With event tracing enabled and a kernel-owned trace buffer still active, a later buffer wrap invokes the callback from privileged...

acceleratortroll

AcceleratorTroll™ Abusing CVE-2023-28206 to make something useful. Roadmap Right now, we are still trying to understand how the vulnerability works and how to exploit it for anything other than panics. Prove that the vulnerability can be used to obtain kernel privileges. Obtain a krw exploit. Run...

CVE-2018-8897

CVE-2018-8897 Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. KVA Shadowing should be disabled and the relevant security update should be uninstalled. This may not work with certain hypervisors like VMWare, which discard the...

ios.CVE-2026-84616-84607

AppleAVE2 CVE Research — iOS 27.0 !IMPORTANT This repository is research-assisted by AI agents !NOTE Open Research Contributions are welcome CVE-2026-84607 AVEVideoEncoder race → kernel privileges: the fix, located What this is iOS 27.0 advisory 149034, component AVEVideoEncoder : "A sandboxed ap...

CVE-2026-40573

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

EUVD-2026-114458

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

CVE-2026-40573 NovumOS: Nova Interpreter Privilege Escalation

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

CVE-2026-40573

The NovumOS 32-bit operating system is vulnerable to local privilege escalation in versions prior to 0.25-beta.1 . The root cause is that the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access, failing to isolate script execution within a restricted Ring 3 domain. An attacker ...

CVE-2026-40573 NovumOS: Nova Interpreter Privilege Escalation

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

CVE-2026-40573: MinecAnton209 NovumOS: NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2...

CVE-2026-47548

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an out-of-bounds write vulnerability within the kernel mode layer to corrupt system memory. Successful exploitation could allow an attacker to achieve arbitrary code execution with elevated kernel privileges, trigger a...

PT-2026-102758

Name of the Vulnerable Software and Affected Versions Azure RTOS affected versions not specified Description In builds with TX ENABLE EVENT TRACE enabled, a user-mode, memory-protected module using TXM MODULE USER MODE | TXM MODULE MEMORY PROTECTION can register an arbitrary function pointer as t...

CVE-2026-84607

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel...

CVE-2026-84506

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84607

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel...