out-of-bounds write Archives • Daily CyberSecurity

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation

Linux AF_PACKET hard_header_len race local privilege escalation kernel proof-of-concept exploit to root commit 03390aa

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation

Do Son August 17, 2026

A public PoC exploits a Linux AF_PACKET race for local privilege escalation to root. Fixed in commit 03390aa; no CVE assigned yet.

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Fraggap Linux kernel vulnerability CVE-2026-53362 enabling local privilege escalation through a UDPv6 out-of-bounds write

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Do Son July 28, 2026

A Linux kernel vulnerability, Fraggap (CVE-2026-53362), has public details and PoC code. The UDPv6 bug enables local root. Update your kernel now.

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs

Do Son July 24, 2026

Google's Chrome security update fixes four high-severity bugs, including CVE-2026-16807, a Codecs flaw that could enable a sandbox escape. Update now.

Critical libssh2 Vulnerability CVE-2026-55200 Enables Remote Code Execution

libssh2 vulnerability CVE-2026-55200 enabling remote code execution via out-of-bounds write

Critical libssh2 Vulnerability CVE-2026-55200 Enables Remote Code Execution

Do Son June 23, 2026

A critical libssh2 vulnerability, CVE-2026-55200, lets remote attackers trigger an out-of-bounds write and achieve remote code execution. Patch now.

Firecracker Security Alert: Virtio-PCI Vulnerability Could Lead to Out-of-Bounds Memory Access Firecracker Vulnerability Virtio-PCI OOB Write

Firecracker Vulnerability Virtio-PCI OOB Write

Firecracker Security Alert: Virtio-PCI Vulnerability Could Lead to Out-of-Bounds Memory Access

Do Son April 8, 2026

AWS patches a high-severity (8.7) Firecracker flaw allowing root guests to trigger memory corruption via the virtio-pci transport. Update your microVMs now.

CVE-2025-27821: Apache Patches Out-of-Bounds Write Flaw in Hadoop HDFS Client CVE-2021-25642 Hadoop HDFS Vulnerability CVE-2025-27821

CVE-2025-27821: Apache Patches Out-of-Bounds Write Flaw in Hadoop HDFS Client

Do Son January 25, 2026

Apache Hadoop HDFS native client flaw CVE-2025-27821 allows out-of-bounds writes. Update to v3.4.2 to prevent crashes and ensure data stability.

Chrome Emergency Fix: Three High-Severity Flaws in WebGPU and V8 Engine Risk RCE Chrome security update, CVE-2026-12007, CVE-2026-12008, CVE-2026-12010 Chrome Security Update CVE-2026-1504 Chrome WebGPU Overflow, V8 RCE

Chrome security update, CVE-2026-12007, CVE-2026-12008, CVE-2026-12010 Chrome Security Update CVE-2026-1504 Chrome WebGPU Overflow, V8 RCE

Chrome Emergency Fix: Three High-Severity Flaws in WebGPU and V8 Engine Risk RCE

Do Son November 6, 2025

Google released an urgent update (v142.0.7444.134) patching three High-severity flaws: WebGPU Out-of-Bounds Write (CVE-2025-12725) and two Inappropriate Implementations in V8 and Views. Update immediately.

Researcher Releases PoC Exploit for Windows Elevation of Privilege Vulnerability Win32K Type Confusion, DirectComposition LPE

Researcher Releases PoC Exploit for Windows Elevation of Privilege Vulnerability

Do Son November 4, 2025

A serious Windows LPE flaw in DirectComposition allows local attackers to gain SYSTEM privileges by exploiting a type confusion bug leading to a controlled out-of-bounds write in kernel memory.

MediaTek Chipset Flaws: Out-of-Bounds Write Vulnerabilities Expose Smartphones & IoT Devices MediaTek Modem Vulnerabilities, January 2026 Security Bulletin MediaTek Vulnerabilities, Chipset Security CVE-2024-20103 & CVE-2024-20100 - CVE-2024-20154 - February 2025 Product Security Bulletin

MediaTek Chipset Flaws: Out-of-Bounds Write Vulnerabilities Expose Smartphones & IoT Devices

Do Son August 4, 2025

MediaTek has patched out-of-bounds write vulnerabilities in its chipsets, exposing smartphones and IoT devices to local privilege escalation. Update firmware immediately.

Redis Vulnerability Opens Door to Remote Code Execution, PoC Releases Redis RCE, HyperLogLog Vulnerability CVE-2024-51741 - CVE-2024-46981

Redis Vulnerability Opens Door to Remote Code Execution, PoC Releases

Do Son July 7, 2025

A flaw (CVE-2025-48367, CVSS 7.0) in Redis HyperLogLog allows authenticated RCE via out-of-bounds writes. PoC available. Update to 8.0.3, 7.4.5, 7.2.10, or 6.2.19!

CVE-2025-53367: DjVuLibre Vulnerability Opens Path to Linux Desktop Code Execution, PoC Available! DjVuLibre, Remote Code Execution

CVE-2025-53367: DjVuLibre Vulnerability Opens Path to Linux Desktop Code Execution, PoC Available!

Do Son July 5, 2025

A flaw (CVE-2025-53367, CVSS 8.4) in DjVuLibre allows remote code execution on Linux via out-of-bounds write. PoC is available; patch to v3.5.29 immediately.

Amazon Alerts: High-Severity FreeRTOS-Plus-TCP Flaw Needs Immediate Patch! FreeRTOS Vulnerability, Embedded Security

Amazon Alerts: High-Severity FreeRTOS-Plus-TCP Flaw Needs Immediate Patch!

Do Son June 6, 2025

Amazon warns of a high-severity (CVSS 8.4) memory corruption flaw (CVE-2025-5688) in FreeRTOS-Plus-TCP. Patch immediately to prevent crashes and RCE in affected devices.

CVE-2024-56626 & CVE-2024-56627: Critical Linux Kernel SMB Server Bugs Uncovered, PoC Published

Do Son January 27, 2025

Discover the critical vulnerabilities in KSMBD, CVE-2024-56626 and CVE-2024-56627, that could allow attackers to gain control of Linux systems.