CVE-2022-21971-Windows-Runtime-RCE

CVE-2022-21971: Libération de pointeur non initialisé dans prauthproviders Cause racine Le constructeur WapAuthProvider::CreateInstance alloue et initialise un objet WapAuthProvider 0x78 octets mais n'initialise pas complètement son état. Le pointeur à l'offset 0x50 n'est pas initialisé et est...

CVE-2022-21971

CVE-2022-21971: освобождение неинициализированного указателя в prauthproviders Корневая причина Конструктор WapAuthProvider::CreateInstance выделяет и инициализирует объект WapAuthProvider 0x78 байт, но не полностью инициализирует его состояние. Указатель по смещению 0x50 не инициализирован и...

cve-2016-0040

cve-2016-0040 poc pour le bug cve-2016-0040 trouvé et exploité par Meysam Firozi @R00tkitSmm ce poc aide à écrire des données arbitraires à une adresse arbitraire dans le noyau Windows pour plus d'informations, voir mon blog :...

CVE-2022-21971

CVE-2022-21971: 초기화되지 않은 포인터 해제 prauthproviders 근본 원인 WapAuthProvider::CreateInstance 생성자는 WapAuthProvider 객체0x78 바이트를 할당하고 초기화하지만, 상태를 완전히 초기화하지 못합니다. 오프셋 0x50에 있는 포인터는 초기화되지 않은 상태이며, 소멸자WapAuthProvider::WapAuthProvider가 호출될 때 해제됩니다: root@kitploit:...

CVE-2022-21974

CVE-2022-21974: Libération de pointeur non initialisé dans l'exécution de code à distance RMSRoamingSecurity Cause racine Le constructeur RMSRoamingSecurity!ATL::CComCreator ::CreateInstance alloue et initialise un objet CRmsRoamingSecurity 0x3470 octets mais il ne parvient pas à initialiser...

CVE-2026-54920 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

CVE-2026-74286

A flaw was found in the Linux kernel's Packet Forwarding Control Protocol PFCP module. The module fails to properly allocate per-CPU statistics, leaving a pointer uninitialized. A local attacker can exploit this by creating a PFCP rtnetlink device, which triggers a null pointer dereference. This...

CVE-2026-16827 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer...

CVE-2026-72455

A flaw was found in the AppArmor security module of the Linux kernel. A bug in the pathname function, related to handling aanull files, may cause an uninitialized pointer to be passed to aaauditfile. This can lead to a kernel page fault, resulting in a system crash and a Denial of Service DoS for...

The vulnerability in the driver/hid/hid-pl.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/hid/hid-pl.c component in the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the iccdebugfs_client_init() function in the drivers/interconnect/debugfs-client.c module of the Linux kernel’s interconnection driver allows a attacker to cause a service failure.

The vulnerability of the iccdebugfsclientinit function in the drivers/interconnect/debugfs-client.c file of the Linux kernel’s interconnection driver module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

MINI-MCRF-QMXP-VRH6

Bulletin has no description...

UBUNTU-CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...

CVE-2026-72455

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to auditloguntrustedstring Commit 4a134723f9f1 "apparmor: move check for aanull file to cover all cases" intrdouced a small bug, where pathname may pass a potentially uninitialized name ...

CVE-2026-72455

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to auditloguntrustedstring Commit 4a134723f9f1 "apparmor: move check for aanull file to cover all cases" intrdouced a small bug, where pathname may pass a potentially uninitialized name ...

UBUNTU-CVE-2026-72455

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to auditloguntrustedstring Commit 4a134723f9f1 "apparmor: move check for aanull file to cover all cases" intrdouced a small bug, where pathname may pass a potentially uninitialized name ...

CVE-2026-68461

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing...

CVE-2026-72455 apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to auditloguntrustedstring Commit 4a134723f9f1 "apparmor: move check for aanull file to cover all cases" intrdouced a small bug, where pathname may pass a potentially uninitialized name ...

CVE-2026-72455

The CVE-2026-72455 entry concerns the Linux kernel’s AppArmor path handling. A bug was introduced where path_name() could pass a potentially uninitialised name to aa_audit_file(), if the path’s dentry had been replaced with aa_null.dentry, triggering an audit path that could lead to a kernel page...

PT-2026-72643

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to audit log untrustedstring Commit 4a134723f9f1 "apparmor: move check for aa null file to cover all cases" intrdouced a small bug, where path name may pass a potentially uninitialized...