The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

blackbox-fuzzing

라우터 TL-WR902AC를 예로 한 IoT 기기 블랙박스 퍼징 이 문서는 제 학기 논문의 HTML 버전으로, PDF는 여기에서 내려받을 수 있다. 서론 퍼징은 소프트웨어에서 버그를 찾는 "가장 효과적인 방법 중 하나"가 되었다. 이러한 주장이나 이와 유사한 주장으로 많은 최신 퍼징 관련 논문이 시작된다 google-scholar. "Internet of Vulnerable Things"라는 주제에 대한 지난 학기 논문의 주요 목표는 메모리 관련 버그를 찾은 다음 이 취약점에 대한 익스플로잇을 작성하는 것이었다. 우리는 펌웨어...

uafuzz

UAFuzz: 바이너리 수준의 Use-After-Free 취약점을 위한 정적 퍼징 정적 회색상자 퍼징DGF은 AFLGo와 같이 사전 선택된 잠재적 취약 대상 위치에 대해 스트레스 테스트를 수행하는 것을 목표로 하며, 다양한 보안 컨텍스트에 적용됩니다: 1 버그 재현, 2 패치 테스트 또는 3 정적 분석 보고서 검증. 최근에는 정적 퍼징의 효과성과 효율성을 개선한 연구 작업이 더 많이 있습니다awesome-directed-fuzzing 참조. 우리는 UAFuzz 를 제안합니다. 이는 바이너리 수준에서 Use-After-FreeU...

Internet-Explorer-UAF

이 저장소에는 README가 없습니다...

AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2026:1779101894)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779101894 advisory. - Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init wh...

Astra Linux – Vulnerability in binutils

A vulnerability was discovered in the binutils libbfd.c 2.36 code, related to auxiliary symbol data. Attackers can use this vulnerability to read from or write to system memory, or cause a denial of service...

Astra Linux – Vulnerability in WebKit2GTK

A memory corruption vulnerability has been addressed through improved locking mechanisms. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15, and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

Astra Linux – Vulnerability in Firefox

In the lginit function, if several allocations succeed, but one fails, an uninitialized pointer would be freed even though it was never actually allocated. This vulnerability affects Firefox versions earlier than 102...

Astra Linux – Vulnerability in virglrenderer

A double-free vulnerability exists in the vrendrenderer.c file within virglrenderer up to version 0.8.1. Attackers can exploit this vulnerability to cause a denial of service by triggering texture allocation failures. The reason is that vrendrendererresourceallocatedtexture is not an appropriate...

Astra Linux – Vulnerability in opensc

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process when using the pkcs15-init function. To exploit these vulnerabilities, an attacker must have physical access to the computer system and use a custom-constructed USB device or sma...

CVE-2026-81646

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-80896

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in mshvirqfddeassign mshvirqfddeactivate and the hlist traversal of ptirqfdslist require pt-ptirqfdslock to be held, but mshvirqfddeassign omits it. This races with the EPOLLHUP path in mshvirqfdwakeup, which does...

CVE-2026-79775

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

CVE-2026-65609

nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a session file, a crafted session file can cause nnn to write data beyond the bounds of fixed-size global buffers when loaded with the -s option. An attacker who...

SUSE CVE-2026-43630

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...

Linux Distros Unpatched Vulnerability : CVE-2026-43630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write...

CVE-2026-43630

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...

CVE-2026-70632

FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD CFHD decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhddecode function fails to enforce...

CVE-2026-19108 MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free

A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mmsmapping/reporting.c of the component URCB Revalidation. The manipulation results in use after free. The attack needs to be...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500136)

The remote Oracle Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500136 advisory. - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832992 CVE-2026-68480 - xfs: resample the data fork...