Exploit for Improper Privilege Management in Microsoft

CVE-2026-69414 — Microsoft Malware Protection Engine EoP Explo...

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp component (VVdeC), which relates to reading beyond the buffer, allows a hacker to trigger a service failure or gain access to protected information.

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

cve-2022-31705

CVE-2022-31705 Introduction https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Testé sur Windows avec VMware Workstation 16.2.0, avec Ubuntu Server 22 comme OS invité Au moins un périphérique USB doit être attaché à la machine invitée...

CVE-2024-26160

CVE-2024-26160 vulnérabilité de divulgation d'informations dans cldflt.sys Il y a un petit article sur CVE-2024-26160 , qui peut être trouvé dans le patch de février KB5034765 , Windows 11 22H2, Windows 11 23H2. La vulnérabilité a été corrigée dans le patch de mars KB5035853. Analyse La...

CVE-2026-103636

Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...

CVE-2026-103513

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...

CVE-2026-103635

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...

CVE-2025-62821

Extensions d'image HEIF de Microsoft msheifstore.dll : Sous-allocation du tampon source dans le chemin CopyPixels entraîne une lecture hors limites et une violation d'accès DoS Lors du décodage d'une image HEIF malveillante via WIC, le codec msheif alloue un tampon source de 1 octet mais tente...

CVE-2026-103636 Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch

Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...

CVE-2026-103636

The Apache DataSketches C++ library (repo: datasketches-cpp ) contains an out-of-bounds read vulnerability in the VarOpt union deserialization function. The var_opt_union::deserialize() function fails to properly validate the preamble of a non-empty union, potentially reading up to 24 bytes past ...

EUVD-2026-96309

Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...

CVE-2026-103635

The Apache DataSketches C++ library (repo: datasketches-cpp ) is vulnerable to an out-of-bounds read during the deserialization of compact Theta sketches . Specifically, the compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() functions read header fields without first ver...

CVE-2026-103635 Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...

EUVD-2026-96308

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...

CVE-2026-103513 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...

EUVD-2026-96307

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...

CVE-2026-103513

The Apache DataSketches C++ library (repository: datasketches-cpp ) is vulnerable to out-of-bounds read and write during CPC sketch deserialization. The root cause is a failure to validate the read position during decoding and a lack of validation for decoded row indices and header fields (includ...

Libssh2-Exploit

Libssh2-Exploit Objectifs Dans ce projet, nous visons à créer un exploit pour une vulnérabilité de lecture hors limites dans libssh2 décrite dans CVE-2019-13115. Créez un serveur ssh malveillant pour faire planter un client qui s'y connecte et voyez si cela peut être exploité davantage pour voler...

CVE-2019-7489

Ce depot n’a pas de fichier README...

CVE-2021-28476

CVE-2021-28476 : Microsoft Hyper-V : Plusieurs vulnérabilités dans vmswitch Plusieurs bugs sont présents dans le code WPP lors du traitement des requêtes set OID, l'un d'eux permettant de déréférencer accès en lecture un pointeur contrôlé par un attaquant, et les autres provoquant des accès en...