Google Hacker Discloses New Linux Kernel Vulnerability and PoC ExploitThe Hacker News·Sep 28, 08:35 UTC · Sep 28, 2018Exploit / PoCCVE-2018-1718260
Inside Win32k Exploitation: Background on Implementations of Win32k and Exploitation MethodologiesPalo Alto Unit 42·Jun 5, 13:30 UTC · Jun 5, 2024Exploit / PoC in the wildCVE-2022-21882CVE-2021-1732CVE-2022-1732160
New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits AndroidThe Hacker News·Jul 3, 19:41 UTC · Jul 3, 2026Exploit / PoC in the wildCVE-2026-46242CVE-2026-43074CVE-2026-31431+2 CVEs160
U.S. CISA adds a flaw in Linux Kernel to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 4, 10:26 UTC · May 4, 2026Exploit / PoC in the wildCVE-2026-3143160
Coruna framework: an exploit kit and ties to Operation TriangulationKaspersky Securelist·Mar 26, 08:00 UTC · Mar 26, 2026Exploit / PoCCVE-2023-32434CVE-2023-3860660
OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become RootSecurity Affairs·Aug 5, 14:24 UTC · Aug 5, 2026Exploit / PoCCVE-2026-6453160
DirtyDecrypt PoC Released for Linux Kernel CVE-2026The Hacker News·May 20, 04:10 UTC · May 20, 2026Exploit / PoCCVE-2026-31635CVE-2026-31431CVE-2026-43284+4 CVEs60
Unprivileged users could exploit AppArmor bugs to gain root accessSecurity Affairs·Mar 16, 08:05 UTC · Mar 16, 2026Exploit / PoC60
8-year-old Linux Kernel flaw DirtyCred is nasty as Dirty PipeSecurity Affairs·Aug 22, 17:51 UTC · Aug 22, 2022Exploit / PoCCVE-2022-0847CVE-2022-2588CVE-2021-415460
Januscape: 16-Year-Old Linux KVM Bug Enables Cloud VM Escape AttacksSecurity Affairs·Jul 7, 07:07 UTC · Jul 7, 2026Exploit / PoCCVE-2026-53359CVE-2026-46316CVE-2026-43284+1 CVEs60
Decrement by one to rule them all: AsIO3.sys driver exploitationCisco Talos·Jun 26, 10:00 UTC · Jun 26, 2025Exploit / PoCCVE-2025-1533CVE-2025-346460
AI-Assisted Bug Hunt Uncovers Linux Kernel 0Infosecurity Magazine·Jul 28, 14:45 UTC · Jul 28, 2026Exploit / PoCCVE-2026-53264CVE-2026-6430060
Zero-Day Flaw in Linux Kernel Found by AIInfosecurity Magazine·May 1, 10:45 UTC · May 1, 2026Exploit / PoCCVE-2026-3143160
U.S. CISA adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jan 27, 14:54 UTC · Jan 27, 2026Exploit / PoC in the wildCVE-2018-14634CVE-2025-52691CVE-2026-21509+2 CVEs60
Dirty COW — Critical Linux Kernel Flaw Being Exploited in the WildThe Hacker News·Oct 25, 15:07 UTC · Oct 25, 2016Exploit / PoC in the wildCVE-2016-519560
Bad Epoll Flaw Gives Attackers Root Access on Linux and AndroidSecurity Affairs·Jul 6, 08:24 UTC · Jul 6, 2026Exploit / PoC in the wildCVE-2026-46242CVE-2026-4307460
Microsoft Zero-Day CVE-2024-38193 was exploited by North KoreaSecurity Affairs·Aug 19, 08:41 UTC · Aug 19, 2024Exploit / PoC in the wildCVE-2024-38193CVE-2024-2133860
The reality of container escapesHelp Net Security·Jan 16, 13:32 UTC · Jan 16, 2023Exploit / PoC in the wild60
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 SystemsThe Hacker News·Jul 7, 04:58 UTC · Jul 7, 2026Exploit / PoCCVE-2026-53359CVE-2026-43284CVE-2026-43500+2 CVEs60
New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache CorruptionThe Hacker News·May 15, 00:00 UTC · May 15, 2026Exploit / PoC in the wildCVE-2026-4630060
Copy Fail: New Linux bug enables Root via page‑cache corruptionSecurity Affairs·Apr 30, 18:23 UTC · Apr 30, 2026Exploit / PoCCVE-2026-31431160
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel ZeroThe Hacker News·Nov 12, 11:14 UTC · Nov 12, 2025Exploit / PoC in the wildCVE-2025-62215CVE-2025-60724CVE-2025-62220+1 CVEs60
U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 5, 06:09 UTC · Mar 5, 2025Exploit / PoC in the wildCVE-2024-50302CVE-2025-22225CVE-2025-22224+3 CVEs60
CISA ADDS MICROSOFT WINDOWS KERNEL BUG USED BY LAZARUS TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOGSecurity Affairs·Mar 5, 15:14 UTC · Mar 5, 2024Exploit / PoC in the wildCVE-2024-2133860
Zero-day vulnerability in Desktop Window Manager (CVE-2021Kaspersky Securelist·Apr 13, 17:35 UTC · Apr 13, 2021Exploit / PoC in the wildCVE-2021-1732CVE-2021-2831060
Apple zero-day exposes macOS to Synthetic MouseSecurity Affairs·Aug 13, 06:10 UTC · Aug 13, 2018Exploit / PoC60
Dirty COW Linux kernel zero-day exploited in the wild is now patchedHelp Net Security·Oct 24, 02:10 UTC · Oct 24, 2016Exploit / PoC in the wildCVE-2016-519560
Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container IsolationThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Exploit / PoC60
CISA adds Arm Mali GPU Kernel Driver, PHP bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jun 13, 20:45 UTC · Jun 13, 2024Exploit / PoC in the wildCVE-2024-4610CVE-2024-4577CVE-2012-1823160
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux HostsThe Hacker News·Aug 6, 17:58 UTC · Aug 6, 2026Exploit / PoC in the wildCVE-2026-64561CVE-2026-53359CVE-2026-4631660
New Actively Exploited Zero-Day Vulnerability Discovered in Apple ProductsThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2022Exploit / PoC in the wildCVE-2022-42856CVE-2022-22587CVE-2022-22594+7 CVEs60
Researcher released PoC exploit code for CVE-2019Security Affairs·Oct 18, 08:56 UTC · Oct 18, 2019Exploit / PoCCVE-2019-221560
Project Zero researcher found unpatched Android zero-day likely exploited by NSO groupSecurity Affairs·Oct 4, 11:48 UTC · Oct 4, 2019Exploit / PoCCVE-2019-221560
New 0-Day Flaw Affecting Most Android Phones Being Exploited in the WildThe Hacker News·Oct 4, 09:12 UTC · Oct 4, 2019Exploit / PoC in the wildCVE-2019-221560
U.S. CISA adds Linux kernel flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Feb 5, 21:00 UTC · Feb 5, 2025Exploit / PoC in the wildCVE-2024-5310460
Google warns of an actively exploited Android kernel flawSecurity Affairs·Sep 4, 20:39 UTC · Sep 4, 2024Exploit / PoC in the wildCVE-2024-36971CVE-2024-3289660
Google addresses actively exploited Android flaw in the kernelSecurity Affairs·May 5, 19:47 UTC · May 5, 2022Exploit / PoC in the wildCVE-2021-2260060
Google triples bounty for new Linux Kernel exploitation techniquesSecurity Affairs·Nov 2, 15:47 UTC · Nov 2, 2021Exploit / PoC60
September 2025 CVE LandscapeRecorded Future·Oct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690CVE-2021-21311CVE-2025-20333+6 CVEs60
U.S. CISA adds Oracle, Mozilla, Microsoft Windows, Linux Kernel, and Microsoft IE flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Oct 7, 07:00 UTC · Oct 7, 2025Exploit / PoC in the wildCVE-2010-3765CVE-2010-3962CVE-2011-3402+4 CVEs60