DiaSymbolView

DiaSymbolView DiaSymbolView — это инструмент для визуального просмотра отладочной информации, записанной в файлах .pdb. Он использует MSDIA API и отображает иерархию отладочных символов и их более 200 свойств. Вы можете скачать бинарные файлы со страницы релизов. Чтобы собрать инструмент...

CVE-2021-2173

CVE-2021-2173 CVE-2021-2173 PoC описан здесь: https://databasesecurityninja.wordpress.com/2021/06/04/cve-2021-2173-pdb-isolation-is-broken-through-metadata-exposure/ Критическое обновление исправлений Oracle — апрель 2021: https://www.oracle.com/security-alerts/cpuapr2021.html...

CVE-2023-22077

CVE-2023-22077 CVE Доказательство концепции: https://databasesecurityninja.wordpress.com/2025/08/04/cve-2023-22077-denial-of-service-from-pdb-level-against-container-level-dos-breaking-pdb-isolation/...

pdbdownload

Portable ExecutablePE 파일과 연결된 PDB 파일을 다운로드하는 유틸리티입니다. 기능 msdl.microsoft.com에서 PDB 심볼을 다운로드합니다. 단일 또는 여러 개의 PortableExecutablePE 파일을 처리합니다. 데모 https://github.com/user-attachments/assets/095fb528-65a6-488e-bfa0-46101738a451 사용법 $./pdbdownload-linux-amd64 -h pdbdownload v1.0 - by Remi GASCOU...

ida_bochs_windows

idabochswindows 네이티브 Bochs 디버거에서 IDA Pro를 사용한 Windows 커널 디버깅용 헬퍼 스크립트 PDB 심볼 포함 python3 + idapython 7.4 Bochs 디버거: Bochs 디버거 GUI: 사용법 경고 : IDA를 열기 전에 환경 변수 NTSYMBOLPATH를 Windows 심볼로 설정해야 합니다. 예: SRVC:\winsymbols "C:\Program Files\IDA Pro 7.7\cfg\dbgbochs.cfg" 파일을 편집하세요. BOCHSDBG =...

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Heap-based Buffer Overflow

Overview Microsoft.DiaSymReader.Native is a Native implementation of PDB file reader and writer. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the processing of PDB files. An attacker can perform an out-of-bounds write and cause unintended behavior by supplying...

GHSA-2J8R-3C22-8565 Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

GHSA-527H-Q9F6-P7QX Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Heap-based Buffer Overflow

Overview Microsoft.DiaSymReader.Native is a Native implementation of PDB file reader and writer. Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the parsing process of Portable PDB files. An attacker can perform an out-of-bounds write and cause unintended or a...

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

GHSA-63GH-G2X5-X69V Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

Heap-based Buffer Overflow

Overview Microsoft.DiaSymReader.Native is a Native implementation of PDB file reader and writer. Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the processing of MSFZ PDB files. An attacker can perform an out-of-bounds write and cause unintended behavior by...

CVE-2026-58649

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

The vulnerability of the PDB decoder in the console-based ImageMagick graphics editor allows a hacker to execute arbitrary code.

The vulnerability of the PDB console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-54389

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

CVE-2026-54389 Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

EUVD-2026-63746

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

CVE-2026-54389

Ghidra (NSA's reverse engineering platform) versions before 12.1.3 are affected by an uncontrolled resource consumption vulnerability in the PDB parser . The AbstractPdb deserialization routine reads all remaining parameters into an unbounded list when processing a crafted PDB file with an oversi...