CVE-2022-37706-LPE-exploit

CVE-2022-37706 大家好，这次我要介绍一个我在 Linux 主要窗口管理器之一 Enlightenment（https://www.enlightenment.org/）中发现的近期 0-day 漏洞。这个 0-day 漏洞可以让任何用户非常轻松且即时地获取 root 权限。该利用程序已在 Ubuntu 22.04 上测试，但应该在任何发行版上都能正常工作。 首先，Enlightenment 是 Linux（主要平台）、BSD 及其他兼容 UNIX 系统的窗口管理器、合成器及极简桌面环境。...

CVE-2024-30051

CVE-2024-30051 — Windows DWM 堆溢出 EoP · 硕士论文研究 -orange Windows 桌面窗口管理器（dwmcore.dll）中的堆缓冲区溢出 本地权限提升 → 通过 DWM 进程获得 SYSTEM 完整性级别 构建目标：Windows 11 22H2 10.0.22621.3447 · 补丁：KB5037771 描述 本仓库包含我针对 CVE-2024-30051 的 硕士论文研究 ，这是 Windows 桌面窗口管理器核心库（dwmcore.dll）中的一个高严重性（CVSS 7.8）权限提升 漏洞。 该漏洞源于...

CVE-2022-37706

CVE-2022-37706 针对 CVE-2022-37706 的漏洞利用程序，这是 Linux 主要窗口管理器之一 Enlightenment（https://www.enlightenment.org/）中的一个 0-day 漏洞。 全部致谢给 MaherAzzouzi（https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit）。这是用于 CTF 的漏洞利用副本。 https://twitter.com/maherazz2/status/1569665311707734023...

Astra Linux – Vulnerability in Chromium

Integer overflow in the Window Manager in Google Chrome on the Chrome OS and Lacros before version 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out-of-bounds memory write via crafted UI interactions. Chrome security severity: Hig...

Astra Linux – Vulnerability in Chromium

Before version 96.0.4664.93, using free after in the window manager in Google Chrome on ChromeOS allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in fly-wm

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...

CVE-2026-65786

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-65787

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-65788

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-65787

The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...

CVE-2026-65788

CVE-2026-65788 is a use-after-free in Desktop Window Manager that enables local privilege escalation for an authorized user. Documented impact is elevation of privileges; CVSSv3.1 base score 7.0 (HIGH) with LOCAL attack, HIGH impact to confidentiality, integrity, and availability. Connected sourc...

EUVD-2026-56444

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability

...

EUVD-2026-56443

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-65786

CVE-2026-65786 is a heap-based buffer overflow in Desktop Window Manager that allows an authorized local attacker to elevate privileges. Affected: Desktop Window Manager on Windows. Root cause: heap-based overflow in DWM. Impact: local privilege escalation with high confidentiality/integrity/avai...

CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability

...

EUVD-2026-56441

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...