The December 2025 Security Update Review

December 09, 2025 | Dustin Childs CONTINUE READING

Detailing Two VMware Workstation TOCTOU Vulnerabilities

Blog post

Detailing Two VMware Workstation TOCTOU Vulnerabilities

October 22, 2020
VMware, Exploit, Research

CVE-2020-9715: Exploiting a Use-After-Free in Adobe Reader

Blog post

CVE-2020-9715: Exploiting a Use-After-Free in Adobe Reader

September 03, 2020
Adobe, Reader, Exploit

CVE-2020-7460: FreeBSD Kernel Privilege Escalation

Blog post

CVE-2020-7460: FreeBSD Kernel Privilege Escalation

September 01, 2020
FreeBSD, LPE, Research

CVE-2020-7454: Killing Two Birds with One Bug in libalias

Blog post

CVE-2020-7454: Killing Two Birds with One Bug in libalias

June 30, 2020
Oracle, FreeBSD, Research

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router

Blog post

ZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 Router

June 25, 2020
NETGEAR, Wireless, 0-day, Exploit

CVE-2020-8871: Privilege Escalation in Parallels Desktop via VGA Device

Blog post

CVE-2020-8871: Privilege Escalation in Parallels Desktop via VGA Device

May 21, 2020
Parallels, Exploit, Research

Details on the Oracle WebLogic Vulnerability Being Exploited in the Wild

Blog post

Details on the Oracle WebLogic Vulnerability Being Exploited in the Wild

May 11, 2020
Oracle, WebLogic, Exploit

CVE-2020-0932: Remote Code Execution on Microsoft SharePoint Using TypeConverters

Blog post

CVE-2020-0932: Remote Code Execution on Microsoft SharePoint Using TypeConverters

April 29, 2020
Microsoft, SharePoint, Exploit

CVE-2020-8835: Linux Kernel Privilege Escalation via Improper eBPF Program Verification

Blog post

CVE-2020-8835: Linux Kernel Privilege Escalation via Improper eBPF Program Verification

April 16, 2020
Linux, Pwn2Own, Exploit, LPE

Exploiting the TP-Link Archer A7 at Pwn2Own Tokyo

Blog post

Exploiting the TP-Link Archer A7 at Pwn2Own Tokyo

April 07, 2020
TPLink, Pwn2Own, Exploit