CVE-2026-20518

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID:...

CVE-2026-20509

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

CVE-2026-20501

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197...

CVE-2026-20517

geniezone is susceptible to a use-after-free flaw that enables local privilege escalation . An attacker who already holds the System privilege can exploit this bug without any user interaction to gain full confidentiality, integrity, and availability impact, scoring CVSS 3.1: 6.7 (MEDIUM) with ve...

EUVD-2026-72204

In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890...

EUVD-2026-72202

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

CVE-2026-20509

CVE-2026-20509 affects Power HAL in MediaTek devices, where a missing bounds check allows an out-of-bounds write , enabling a local attacker who already holds the System privilege to escalate further. No user interaction is required. The CVSS 3.1 score is 6.7 (Medium) with High impact to confiden...

CVE-2026-20506

CVE-2026-20506 affects the Audio HAL component, where a use-after-free flaw can lead to local privilege escalation . An attacker must already hold the System privilege; no user interaction is required. The CNA-assigned CVSS 3.1 score is 6.7 (MEDIUM) , reflecting local attack vector, low complexit...

EUVD-2026-72195

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196...

CVE-2026-20502

CVE-2026-20502 affects the vdec (video decoder) component in MediaTek platforms. The root cause is an out-of-bounds write resulting from a missing bounds check , which can lead to local privilege escalation requiring no additional execution privileges and no user interaction. The vulnerability is...

CVE-2026-20501

MediaTek's vdec (video decoder) is affected by a heap buffer overflow that can cause an out-of-bounds write, enabling local escalation of privilege without requiring any prior execution privileges or user interaction. The vulnerability is rated CVSS 8.4 (HIGH) with impacts to confidentiality, int...

EUVD-2026-72194

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE CVE-2025-7771에 대한 개념 증명PoC입니다. ThrottleStop.sys는 접근 통제 없이 임의의 물리 메모리 읽기/쓰기를 허용하는 두 개의 IOCTL 핸들러를 노출합니다. 즉, 관리자 권한을 가진 모든 프로세스가 물리 RAM 어디든 읽거나 쓸 수 있습니다. Windows 10 22H2 및 Windows 11 23H2 x64에서 테스트했습니다. 수행 내용 드라이버 바이너리를 IDA Pro에 로드하여 내부적으로 어떻게 동작하는지 파악하는 것부터...

CVE-2026-50656-rogueplanet-validation

RoguePlanet PoC 검증 보고서 - Microsoft Defender 보고서의 목적과 범위 본 보고서는 Microsoft Defender와 관련하여 공개적으로 설명된 RoguePlanet PoC의 검증에 관한 것입니다. 설명된 기술은 2026년 6월 10일 언론에서 LPE로컬 권한 상승로 발표되었으며, 로컬 사용자가 NT AUTHORITY\SYSTEM 권한을 얻을 수 있었습니다. 공개 설명에 따르면 이 메커니즘은 Microsoft Defender가 파일을 처리하거나 검사할 때 사용하는 기능을 활용합니다. 테스트의 목적...

PT-2026-86675

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

PT-2026-86598

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196...

PT-2026-86664

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC FortiOS 5.6.0 5.6.2, 5.4.0 5.4.8 및 5.2 미만에 대한 로컬 권한 상승 개념 증명 fnsysctl 및 USB를 통해 트리거됨 따라서 물리적 접근 필요. 이 PoC는 CVE-2017-14187을 악용하여 로컬 루트 셸을 생성합니다. 분석글 한국어 영어 TL;DR 1. fnsysctl cp /usb/payloadpathfile /etc/ld.so.preload 2. fnsysctl ls - LDPRELOAD 인젝션 - 임의 코드 실행 - LPE제한된 셸 탈출 소스에서 빌...

ghostlock-aak-apk

GhostLock AAK Launcher CVE-2026-43499 · Linux kernel rtmutex スタック Use-After-Free ローカル権限昇格（LPE）ローダー/トリガー 本リポジトリはセキュリティ研究および脆弱性検証（PoC）プロジェクト であり、管理されたテスト環境 において CVE-2026-43499（GhostLock）脆弱性のトリガープロセスをデモ・検証するためのものです。 プロジェクト概要 これは外部 preload.so と連携して使用する Android アプリ（APK）「ローダー/トリガー」です。 対象脆弱性...

Copy-Fail-CVE-2026-31431-Lab

Copy Fail（CVE-2026-31431）— エクスプロイト再現＆検出ラボ このリポジトリは、カーネル 4.14〜7.0-rc に影響する重大な Linux カーネルローカル権限昇格脆弱性である CVE-2026-31431（"Copy Fail"） に関する、エンドツーエンドの再現、検出エンジニアリング、インシデントレスポンスを文書化したものです。 主な発見 ✅ Kali Linux 2026.1（カーネル 6.18.12+kali-amd64）で CVE-2026-31431 の悪用に成功 ✅ auditd のシステムコールレベル検出ルールを展開 ✅...