Reproduce-CVE-2023-52927

Reproduce-CVE-2023-52927 Target kCTF cos-109-17800.436.33 machine: Kernel image bzImage: https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/bzImage Kernel image vmlinux: https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/vmlinux.gz Kernel config...

CVE-2025-53136

CVE-2025-53136 Kernel Information Disclosure through Race condition . https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43511 https://www.crowdfense.com/nt-os-kernel-information-disclosure-vulnerability-cve-2025-53136/...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in OS kernel

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in OS kernel in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-46116 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete KASAN...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in OS kernel

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in OS kernel in versions 10.6.0.11 and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-46086 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU reade...

You Shall Not Pass into Ring-0! a User Privacy-Friendly Anti-Cheat Architecture for Personal Computers

Kernel-level anti-cheats are effective against malicious player behavior in competitive video games, but raise significant user privacy concerns regarding installing unverifiable components at privileged modes i.e., ring-0 in x86. While existing research has focused on improving the effectiveness...

CVE-2026-42980 NT OS Kernel Elevation of Privilege Vulnerability

...

CVE-2026-42916: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-42980: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-36922: Use After Free

In bigomap of bigoiommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Kernel level with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2024-40309

Malicious code in bioql PyPI...

EUVD-2024-40369

Malicious code in bioql PyPI...

EUVD-2022-28384

Malicious code in bioql PyPI...

EUVD-2023-25855

Malicious code in bioql PyPI...

CVE-2025-53136: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in OS kernel

Summary The following CVEs in the OS kernel may affect IBM DataPower Gateway Vulnerability Details CVEID:CVE-2023-52458 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: block: add check that partition length needs to be aligned with block size Before calling add...

CVE-2022-30772

Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory. Function 0x52 of the PnpSmm driver is passed the address and size of data to write into the SMBIOS table, but manipulation of the address could be used by malware to overwrit...

November Microsoft Patch Tuesday

November Microsoft Patch Tuesday. 125 CVEs, 35 of which were added since October MSPT. 2 vulnerabilities with signs of exploitation in the wild: Elevation of Privilege - Windows Task Scheduler CVE-2024-49039 Disclosure/Spoofing - NTLM Hash CVE-2024-43451 No signs of exploitation, but with a priva...

CVE-2024-43623

Windows NT OS Kernel Elevation of Privilege Vulnerability...

CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege Vulnerability

...

KLA77106 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code...