[Fixed] Android: GKI kernels contain broken non-upstream Speculative Page Faults MM code About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-11-4 02:50:24 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Windows Kernel allows deletion of keys in virtualizable hives with KEY_READ and KEY_SET_VALUE access rights About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-11-2 23:31:15 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Windows Kernel registry SID table poisoning leading to bad locking and other issues About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-31 21:6:32 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Arm Mali: insufficient cache invalidation for non-page-aligned user buffer imports About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-28 05:5:21 | 阅读: 2 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] libCoreEntitlements: CEContextQuery can return arbitrary entitlements About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-26 22:16:8 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Windows Kernel multiple issues in the key replication feature of registry virtualization About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-25 21:42:6 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Android: Binder VMA management security issues About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-21 05:51:27 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Arm Mali CSF: kbase_kcpu_command_queue UAF in kbase_csf_kcpu_queue_enqueue() About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-20 03:29:45 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Chrome: Design flaw in Synchronous Mojo message handling introduces unexpected reentrancy and allows for multiple UAFs About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-19 00:24:0 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Arm Mali CSF: tiler heap uses KBASE_REG_NO_USER_FREE unsafely, leading to UAF About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-18 00:27:29 | 阅读: 9 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Windows Kernel use-after-free due to dangling registry link node under paged pool memory pressure About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-13 22:9:57 | 阅读: 1 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] crewjam/saml: Signature bypass via multiple Assertion elements About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-7 20:40:11 | 阅读: 5 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] node-saml: Signature bypass via multiple root elements About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-6 21:34:43 | 阅读: 5 | 收藏 | bugs.chromium.org monorail

[Fixed] Windows Kernel memory corruption due to insufficient handling of predefined keys in registry virtualization About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-6 21:6:38 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Linux: khugepaged races with rmap-based zap, races with GUP-fast, and fails to call MMU notifiers About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-10-6 03:9:5 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] WebKit: Use-after-free of RenderMathMLToken in CSSCrossfadeValue::crossfadeChanged About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-9-22 21:59:46 | 阅读: 4 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] XNU race condition in vm_map_copy_overwrite_unaligned allows writing to read-only mappings About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-9-22 21:41:37 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] XNU VM copy-on-write bypass due to incorrect shadow creation logic during unaligned vm_map_copy operations About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-9-22 21:39:55 | 阅读: 5 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Windows Kernel use-after-free due to bad handling of predefined keys in NtNotifyChangeMultipleKeys About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-9-22 15:55:31 | 阅读: 5 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Chrome: heap-use-after-free in blink::LocalFrameView::PerformLayout (incomplete fix for CVE-2022-3199) About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2022-9-19 19:19:27 | 阅读: 11 | 收藏 | bugs.chromium.org monorail