>> TAG: #remote exploit

WebKit – ‘WebCore::InputType::element’ Use-After-Free

WebKit – ‘WebCore::PositionIterator::decrement’ Use-After-Free

Microsoft Windows 10 – ‘nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry)’ Pool Memory Disclosure

Vonage VDV-23 – Denial of Service

iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 – Denial of Service

Microsoft Windows 10 – CiSetFileCache TOCTOU Security Feature Bypass

Reversing and Exploiting IoT devices

[Hebrew] Digital Whisper Security Magazine #88

Microsoft Edge – ‘Object.setPrototypeOf’ Memory Corruption

Microsoft Edge Chakra: JIT – ‘Lowerer::LowerBoundCheck’ Incorrect Integer Overflow Check