Trusted Execution Environment Privilege Escalation

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-68081

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel, specifically within its nested virtualization nVMX feature. When a nested virtual machine VM attempts to enter an invalid guest state during VMLAUNCH or VMRESUME operations, the system fails to properly releas...

claude-code-macos-poc

Claude Isolation Workstation This is an experimental applicat...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.22 Images

Red Hat OpenShift Virtualization release v4.22 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html WebVM is a server-less virtual environment running fully client-side in HTML5/WebAssembly. It...

trusted execution environment Privilege Escalation

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-96914

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-88074

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-83885

Inadequate encryption strength in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...

CVE-2026-70075

Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2026-108471

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-102211

Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-108471

Windows Virtualization-Based Security (VBS) Enclave is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high severity base score of 8.8 , with significant impacts ...

EUVD-2026-100456

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-108130

A heap-based buffer overflow exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or remediation details are provided in the documents beyond the confirmation of ...

CVE-2026-102211

A use after free vulnerability exists in the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). No specific exploit detail...

EUVD-2026-100365

Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-96914

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed and has a high severity score (8.8), specific details regard...

CVE-2026-70075

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to perform a local security feature bypass . The impact is characterized as a high integrity impact with a Medium base severity ...

CVE-2026-88074

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents, but the official M...