PT-2026-55651

Name of the Vulnerable Software and Affected Versions DeepMyst Mysti versions prior to 0.4.0 Description Remote manipulation of the workspacePath argument within the initProjectMemory function, located in the src/managers/MemoryManager.ts file of the Per-Project Auto-Memory Handler component, can...

Code injection

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack...

CVE-2019-20172

CVE-2019-20172 affects SerenityOS (pre-2019-12-30). The vulnerability is in Kernel/VM/MemoryManager.cpp where syscalls with pointers into kernel-only virtual address space are not rejected, enabling a local attacker to gain privileges by overwriting a return address found on the kernel stack. Imp...