optee-qemu

CVE-2021-44733: Fuzzing et exploitation d'une use-after-free dans le sous-système TEE du noyau Linux Récemment, une vulnérabilité de type use-after-free a été découverte dans le sous-système TEE du noyau Linux, jusqu'à la version 5.15.11 incluse, et s'est vu attribuer le CVE-2021-44733 1. À...

2022-LPE-UAF

2022-LPE-UAF Code POC non testé Des chercheurs en sécurité ont découvert 3 vulnérabilités dans le noyau Linux qui pourraient permettre à un attaquant local d'élever ses privilèges et potentiellement exécuter du code malveillant. Le code de preuve de concept est publiquement disponible, ce qui...

full-poc-CVE-2025_21298

Analyse de la vulnérabilité CVE-2025-21298 CVE-2025-21298 est une vulnérabilité critique dans la technologie OLE Object Linking and Embedding utilisée dans Microsoft Windows. Elle affecte spécifiquement la fonction UtOlePresStmToContentsStm dans la bibliothèque ole32.dll. Cette fonction est charg...

CVE-2021-40449

CVE-2021-40449 Mon exploit pour CVE-2021-40449, une élévation de privilèges locale LPE Windows via une UAF dans win32kfull!GreResetDCInternal. Résumé En plus de la vulnérabilité UAF, d'autres primitives sont utilisées pour rendre cet exploit possible : Fuite de l'adresse du jeton d'accès de...

CVE-2026-78964

A use-after-free vulnerability in the Sync component of Google Chrome on iOS (versions prior to 152.0.7977.65 ) allowed a remote attacker to potentially execute arbitrary code outside the sandbox by luring the victim into visiting a crafted HTML page. The Chromium team assigned a security severit...

CVE-2026-78964

Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79197

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79197

CVE-2026-79197 is a use-after-free vulnerability in the V8 engine of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit it via a crafted HTML page to execute arbitrary code inside the sandbox . Chromium rates its security severity as Low , consistent with ...

CVE-2026-79244

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79244

CVE-2026-79244 is a use-after-free vulnerability in the Animation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . The Chromium project classifies the severity as Low , consis...

CVE-2026-79056

Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79056

CVE-2026-79056 is a use-after-free vulnerability in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The Chromium security severity is rated Low . The fix is incl...

CVE-2026-79119

Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2026-79119

A use after free vulnerability in the PDF component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the sandbox by crafting a specially crafted PDF file. The Chromium project classifies this as Low severity. The practical consequence is code execu...

CVE-2026-79266

A use after free vulnerability in DevTools of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to execute arbitrary code inside the sandbox via a crafted Chrome extension . The Chromium security severity is rated Medium . The fix is to update Chrome t...

CVE-2026-79266

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2023-21608

CVE-2023-21608 Discord Server Ce bug était une Use after Free qui a été causée lors de l'opération resetForm pendant la gestion des références mémoire des objets. Blog Adobe Acrobat Reader - resetForm - CAgg UaF - RCE Exploit - CVE-2023-21608 Advisory CVE-2023-21608 Demo...

CVE-2026-79097

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79097

A use-after-free vulnerability in V8 (Chrome's JavaScript engine) in Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the Chrome sandbox by luring a user into opening a crafted HTML page . Chromium assigns the vulnerability a Medium security severity....

CVE-2026-78913

CVE-2026-78913 is a use-after-free vulnerability in the Chromoting component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can potentially execute arbitrary code outside the sandbox by sending crafted network traffic. The Chromium security team rates this as Medium severity....