libvhdi

libvhdi is a library to access the Virtual Hard Disk VHD image format. Project information: Status: alpha Licence: LGPL-3.0-or-later Read supported formats: Virtual Hard Disk version 1 VHD Virtual Hard Disk version 2 VHDX Supported image types: Fixed-size hard disk image Dynamic-size or sparse ha...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

Windows 11 25H2 - Heap Overflow

Exploit Title: Windows 11 25H2 - Heap Overflow Ghost Patch Exploit Framework Date: 2026-02-13 Exploit Author: nu11secur1ty Vendor Homepage: https://www.microsoft.com Software Link: https://www.microsoft.com/software-download/windows11 Version: Windows 11 25H2 Build 26200.7830 Vulnerable Tested on...

EUVD-2024-37808

Malicious code in bioql PyPI...

CVE-2025-49683

Technical details about CVE-2025-49683 (VHDX integer overflow) are not provided in the connected documents. Monitor for updates.

CVE-2025-47973: Buffer Over-read

Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

CVE-2025-47971: Buffer Over-read

Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

PT-2025-31: Local Privilege Escalation (LPE) via Virtual Hard Disk (VHDX) in Microsoft Windows

The Local Privilege Escalation LPE via Virtual Hard Disk VHDX vulnerability was discovered in Microsoft Windows. The vulnerability allows an authorized attacker to gain SYSTEM privileges. The affected products: Windows 10 for x64-based/32-bit Systems Versions to 10.0.10240.21073 Windows 10 Versio...

CVE-2025-49689: Integer Overflow or Wraparound

Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

CVE-2025-49683: Integer Overflow or Wraparound

Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to execute code locally...

CVE-2024-38264

Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...

CVE-2024-38264 Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

...

PT-2024-8079

Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Hard Disk VHDX affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory, which can lead to a denial-of-service...

CVE-2024-38264: Sensitive Data Storage in Improperly Locked Memory

Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...

Difference between vhd and vhdx

What's the difference between vhd and vhdx?...

SUSE CVE-2014-0148

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for blocksize and logicalsectorsize variables. These are used to derive other fields like 'sectorsperblock' etc. A user able t...

CVE-2014-0148

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for blocksize and logicalsectorsize variables. These are used to derive other fields like 'sectorsperblock' etc. A user able t...

DEBIAN-CVE-2014-0148

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for blocksize and logicalsectorsize variables. These are used to derive other fields like 'sectorsperblock' etc. A user able t...

CVE-2014-0148

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for blocksize and logicalsectorsize variables. These are used to derive other fields like 'sectorsperblock' etc. A user able t...

CVE-2014-0148

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for blocksize and logicalsectorsize variables. These are used to derive other fields like 'sectorsperblock' etc. A user able t...