Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Finding and Patching a CPython 0day in Hours: CVE-2026-6100

theori.io | vulnerability | Critical | CVE-2026-6100 | #ai-security | #zero-day | #use-after-free | #patch | #cpython | #cve-2026-6100 | #tarfile

Summary

CVE-2026-6100 timeline: Xint Code flagged a critical CPython tarfile flaw within 30 minutes, and Python maintainers patched three compression modules the day after the report.
CVSS
9.1
Published
Collected

original ↗

Related coverage

  1. Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394) (theori.io)
  2. Chaining N-days to Compromise All: Part 2 — Windows Kernel LPE (a.k.a Chrome Sandbox Escape) (theori.io)
  3. Linux Kernel Exploit (CVE-2022–32250) with mqueue (theori.io)
  4. PageJack in Action: CVE-2022-0995 exploit (blog.quarkslab.com)
  5. Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel (swarm.ptsecurity.com)
  6. Exploiting MS16-145: MS Edge TypedArray.sort Use-After-Free (CVE-2016-7288) (blog.quarkslab.com)

back