DiaSymbolView

DiaSymbolView DiaSymbolView es una herramienta para inspeccionar visualmente la información de depuración registrada en archivos .pdb. Se basa en la API de MSDIA y presenta una jerarquía de símbolos de depuración y sus más de 200 propiedades. Puede descargar los binarios desde la página de...

CVE-2021-2173

CVE-2021-2173 CVE-2021-2173 El PoC se explica aquí: https://databasesecurityninja.wordpress.com/2021/06/04/cve-2021-2173-pdb-isolation-is-broken-through-metadata-exposure/ Aviso de Actualización Crítica de Parches de Oracle - Abril 2021: https://www.oracle.com/security-alerts/cpuapr2021.html...

CVE-2023-22077

CVE-2023-22077 Prueba de concepto del CVE: https://databasesecurityninja.wordpress.com/2025/08/04/cve-2023-22077-denial-of-service-from-pdb-level-against-container-level-dos-breaking-pdb-isolation/...

pdbdownload

Una utilidad para descargar archivos PDB asociados a un Portable Executable PE. Características Descargar símbolos PDB de msdl.microsoft.com. Procesar un solo archivo PortableExecutable PE o un lote de ellos. Demostración...

ida_bochs_windows

idabochswindows Script auxiliar para depuración del kernel de Windows con IDA Pro en el depurador nativo de Bochs incluidos símbolos PDB python3 + idapython 7.4 Depurador de Bochs: GUI del depurador de Bochs: Uso ADVERTENCIA : ANTES DE ABRIR IDA debes establecer la variable de entorno: NTSYMBOLPA...

GHSA-2J8R-3C22-8565 Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

GHSA-527H-Q9F6-P7QX Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

GHSA-63GH-G2X5-X69V Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

CVE-2026-58649

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-54389

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

CVE-2026-54389

Ghidra (NSA's reverse engineering platform) versions before 12.1.3 are affected by an uncontrolled resource consumption vulnerability in the PDB parser . The AbstractPdb deserialization routine reads all remaining parameters into an unbounded list when processing a crafted PDB file with an oversi...

EUVD-2026-63746

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

CVE-2026-54389 Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

CVE-2026-54389 Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

PT-2026-79259

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

PT-2026-72646

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in unpack pdb pdb-dfa could be NULL if unpack dfa fails, causing a NULL pointer dereference...

JLSEC-2026-1054 ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses...

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory...