Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-36710
8.8
HIGHCVSS v3
Published
June 8, 2022
CVSS v2
7.2 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0.
GitHub