out-of-bounds write Archives • Daily CyberSecurity

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Fraggap Linux kernel vulnerability CVE-2026-53362 enabling local privilege escalation through a UDPv6 out-of-bounds write

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Do Son July 28, 2026

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named...

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs

Do Son July 24, 2026

TL;DR Google pushed Chrome 150.0.7871.186/.187 to the Stable channel on 23 July 2026. This Chrome security update...

libssh2 vulnerability CVE-2026-55200 enabling remote code execution via out-of-bounds write

Critical libssh2 Vulnerability CVE-2026-55200 Enables Remote Code Execution

Do Son June 23, 2026

TL;DR A serious libssh2 vulnerability now puts SSH clients at risk. Researchers track it as CVE-2026-55200,...

Firecracker Security Alert: Virtio-PCI Vulnerability Could Lead to Out-of-Bounds Memory Access Firecracker Vulnerability Virtio-PCI OOB Write

Firecracker Vulnerability Virtio-PCI OOB Write

Firecracker Security Alert: Virtio-PCI Vulnerability Could Lead to Out-of-Bounds Memory Access

Do Son April 8, 2026

AWS has issued a high-severity security advisory for Firecracker, the open-source virtualization technology purpose-built for high-scale, multi-tenant...

CVE-2025-27821: Apache Patches Out-of-Bounds Write Flaw in Hadoop HDFS Client CVE-2021-25642 Hadoop HDFS Vulnerability CVE-2025-27821

CVE-2025-27821: Apache Patches Out-of-Bounds Write Flaw in Hadoop HDFS Client

Do Son January 25, 2026

The Apache Software Foundation has released a security update for Apache Hadoop, the backbone of big data...

Chrome Emergency Fix: Three High-Severity Flaws in WebGPU and V8 Engine Risk RCE Chrome security update, CVE-2026-12007, CVE-2026-12008, CVE-2026-12010 Chrome Security Update CVE-2026-1504 Chrome WebGPU Overflow, V8 RCE

Chrome security update, CVE-2026-12007, CVE-2026-12008, CVE-2026-12010 Chrome Security Update CVE-2026-1504 Chrome WebGPU Overflow, V8 RCE

Chrome Emergency Fix: Three High-Severity Flaws in WebGPU and V8 Engine Risk RCE

Do Son November 6, 2025

Google has released a Stable Channel Update for Chrome Desktop (version 142.0.7444.134/.135) for Windows, macOS, and Linux...

Researcher Releases PoC Exploit for Windows Elevation of Privilege Vulnerability Win32K Type Confusion, DirectComposition LPE

Researcher Releases PoC Exploit for Windows Elevation of Privilege Vulnerability

Do Son November 4, 2025

Security researcher Hyeonjin Choi has detailed a serious privilege escalation vulnerability (CVE-2025-50168) in Microsoft Windows’ Win32K subsystem,...

MediaTek Chipset Flaws: Out-of-Bounds Write Vulnerabilities Expose Smartphones & IoT Devices MediaTek Modem Vulnerabilities, January 2026 Security Bulletin MediaTek Vulnerabilities, Chipset Security CVE-2024-20103 & CVE-2024-20100 - CVE-2024-20154 - February 2025 Product Security Bulletin

MediaTek Chipset Flaws: Out-of-Bounds Write Vulnerabilities Expose Smartphones & IoT Devices

Do Son August 4, 2025

MediaTek, one of the world’s leading chipset manufacturers, has published its latest Product Security Bulletin, revealing several...

Redis Vulnerability Opens Door to Remote Code Execution, PoC Releases Redis RCE, HyperLogLog Vulnerability CVE-2024-51741 - CVE-2024-46981

Redis Vulnerability Opens Door to Remote Code Execution, PoC Releases

Do Son July 7, 2025

Redis, the beloved in-memory data store powering millions of real-time applications, has just patched a critical vulnerability...

CVE-2025-53367: DjVuLibre Vulnerability Opens Path to Linux Desktop Code Execution, PoC Available! DjVuLibre, Remote Code Execution

CVE-2025-53367: DjVuLibre Vulnerability Opens Path to Linux Desktop Code Execution, PoC Available!

Do Son July 5, 2025

A newly discovered critical vulnerability in DjVuLibre, the open-source decoder for DjVu document files, has opened the...

Amazon Alerts: High-Severity FreeRTOS-Plus-TCP Flaw Needs Immediate Patch! FreeRTOS Vulnerability, Embedded Security

Amazon Alerts: High-Severity FreeRTOS-Plus-TCP Flaw Needs Immediate Patch!

Do Son June 6, 2025

Amazon has issued a security advisory for a memory corruption vulnerability in the widely used FreeRTOS-Plus-TCP stack....

CVE-2024-56626 & CVE-2024-56627: Critical Linux Kernel SMB Server Bugs Uncovered, PoC Published

Do Son January 27, 2025

Security researcher Jordy Zomer have recently discovered two critical vulnerabilities in KSMBD, the in-kernel SMB server for...