PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

No Time to Pwn: CVE-2026-72018

xbow.com | vulnerability | CVE-2026-72018 | #vulnerability-research | #lpe | #linux-kernel | #xbow | #ai-agent | #cve-2026-72018
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

XBOW discovered and exploited CVE-2026-72018, an out-of-bounds write in the Linux kernel reachable by unprivileged users with CAP_NET_ADMIN. A seemingly weak 16-byte write primitive chains into local privilege escalation to root, with human judgment still needed at a few critical research moments.
CVE
CVE-2026-72018
Published
Collected

Related coverage

blog · xbow.com
A Vulnerability Is a Hypothesis. An Exploit Is the Proof.
Every security team runs on one scarce resource: the attention of those who can fix things. Only an exploitable bug is worth interrupting an engineer for.
blog · xbow.com
XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six Days
XBOW recently discovered and built a Chrome full-chain exploit affecting an estimated billion users globally.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · starlabs.sg
When AI Makes 0-Days Feel Like N-Days
The author used AI to find a UAF bug in Linux net/sched and built an LPE exploit for CentOS 9 at TyphoonPwn 2026. AI sped things up, but deep subsystem knowledge still mattered.
vulnerability · theori.io
Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394)
A deep dive into CVE-2024-27394, a TCP-AO use-after-free caused by incorrect RCU API usage in the Linux kernel, covering RCU internals, the patch, and the ExpRace technique for reliable triggering.
vulnerability · theori.io
Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System
Part three of the N-day exploit chain series, covering a Windows driver privilege-escalation flaw used to move from medium-integrity access to SYSTEM in a full exploit chain.
Back