Pwn2Own Berlin 2025: Day Three Results

May 17, 2025 | Dustin Childs CONTINUE READING
CVE-2021-28474: SharePoint Remote Code Execution via Server-Side Control Interpretation Conflict
Blog post

CVE-2021-28474: SharePoint Remote Code Execution via Server-Side Control Interpretation Conflict

CVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability
Blog post

CVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability

CVE-2021-31440: An Incorrect Bounds Calculation in the Linux Kernel eBPF Verifier
Blog post

CVE-2021-31440: An Incorrect Bounds Calculation in the Linux Kernel eBPF Verifier

CVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring Subsystem
Blog post

CVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring Subsystem

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint
Blog post

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier
Blog post

ZDI-20-1440: An Incorrect Calculation Bug in the Linux Kernel eBPF Verifier

CVE-2020-1181: SharePoint Remote Code Execution Through Web Parts
Blog post

CVE-2020-1181: SharePoint Remote Code Execution Through Web Parts

CVE-2020-0932: Remote Code Execution on Microsoft SharePoint Using TypeConverters
Blog post

CVE-2020-0932: Remote Code Execution on Microsoft SharePoint Using TypeConverters

CVE-2020-8835: Linux Kernel Privilege Escalation via Improper eBPF Program Verification
Blog post

CVE-2020-8835: Linux Kernel Privilege Escalation via Improper eBPF Program Verification

Looking Back at the Impact of CVE-2019-0604: A SharePoint RCE
Blog post

Looking Back at the Impact of CVE-2019-0604: A SharePoint RCE