619 matches found
CVE-2022-37706-LPE-exploit
CVE-2022-37706 大家好，这次我要介绍一个我在 Linux 主要窗口管理器之一 Enlightenment（https://www.enlightenment.org/）中发现的近期 0-day 漏洞。这个 0-day 漏洞可以让任何用户非常轻松且即时地获取 root 权限。该利用程序已在 Ubuntu 22.04 上测试，但应该在任何发行版上都能正常工作。 首先，Enlightenment 是 Linux（主要平台）、BSD 及其他兼容 UNIX 系统的窗口管理器、合成器及极简桌面环境。...
CVE-2026-20805-PoC
🛡️ AI Security Tool Module CVE-2026-20805: Desktop Window Manager dwm.exe Memory Disclosure Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview This module...
CVE-2022-37706
CVE-2022-37706 针对 CVE-2022-37706 的漏洞利用程序，这是 Linux 主要窗口管理器之一 Enlightenment（https://www.enlightenment.org/）中的一个 0-day 漏洞。 全部致谢给 MaherAzzouzi（https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit）。这是用于 CTF 的漏洞利用副本。 https://twitter.com/maherazz2/status/1569665311707734023...
CVE-2024-30051
CVE-2024-30051 — Windows DWM 堆溢出 EoP · 硕士论文研究 -orange Windows 桌面窗口管理器（dwmcore.dll）中的堆缓冲区溢出 本地权限提升 → 通过 DWM 进程获得 SYSTEM 完整性级别 构建目标：Windows 11 22H2 10.0.22621.3447 · 补丁：KB5037771 描述 本仓库包含我针对 CVE-2024-30051 的 硕士论文研究 ，这是 Windows 桌面窗口管理器核心库（dwmcore.dll）中的一个高严重性（CVSS 7.8）权限提升 漏洞。 该漏洞源于...
Astra Linux – Vulnerability in Chromium
Before version 96.0.4664.93, using free after in the window manager in Google Chrome on ChromeOS allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Integer overflow in the Window Manager in Google Chrome on the Chrome OS and Lacros before version 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out-of-bounds memory write via crafted UI interactions. Chrome security severity: Hig...
Astra Linux – Vulnerability in fly-wm
The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of desktop window managers in Windows operating systems allows attackers to increase their privileges.
The vulnerability of desktop window managers in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2026-65786
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-65787
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-65788
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
EUVD-2026-56444
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-65788
CVE-2026-65788 is a use-after-free in Desktop Window Manager that enables local privilege escalation for an authorized user. Documented impact is elevation of privileges; CVSSv3.1 base score 7.0 (HIGH) with LOCAL attack, HIGH impact to confidentiality, integrity, and availability. Connected sourc...
CVE-2026-65787
The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...
CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability
...
EUVD-2026-56443
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-65786
CVE-2026-65786 is a heap-based buffer overflow in Desktop Window Manager that allows an authorized local attacker to elevate privileges. Affected: Desktop Window Manager on Windows. Root cause: heap-based overflow in DWM. Impact: local privilege escalation with high confidentiality/integrity/avai...