use-after-free 开源项目推荐（59 个）

stong /how-to-exploit-a-double-free

如何在2021年利用双重免费漏洞。使用后免费为傻瓜

hacksysteam /CVE-2023-21608

Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit

hacksysteam /CVE-2022-28672

Foxit PDF Reader Remote Code Execution Exploit

pubglite55 /findn2-ksu-chain

OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation

0xjohnnydev /CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)

SoftwareSecurityLab /UbSym

A Unit-Based Symbolic Execution Method for Detecting Memory Corruption Vulnerabilities in Executable Codes

SyntaxMethod /CVE-2026-42978-PoC-Research

CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool.

0xjohnnydev /CVE-2026-20687-AppleJPEGDriver-UAF

CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)

Fraunhofer-AISEC /MSET

An evaluation tool for memory safety sanitizers.

GB102 /VirtualEXploiter

VFGadget locator to facilitate Counterfeit Object-Oriented Programming (COOP) and Loop-Oriented Programming (LOP) attacks to bypass advanced security protections like Intel CET and Control-Flow Guard (CFG) to achieve Remote Code Execution.

vital-information-resource-under-siege /PWN-Challenges

Writeups of some of the Binary Exploitation challenges that I have solved during CTF.

GJDuck /BlueFat

Fully Randomized Pointers

Alucard0x1 /cve-2026-98432

Proof-only PoC for CVE-2026-98432 (Linux IPv4/TCP ireq_opt use-after-free): race trigger, heap-reuse oracle, no code execution

ntfargo /uaf-2023-28205

PoC CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability

H1z3-br0 /CVE-2026-98432

Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4/TCP ireq_opt use-after-free).

sgInnora /innora-cve-research

Innora Security Research — Synology DSM & Linux kernel CVE root-cause analysis, verified exploits and reproducible labs (C3RB3R ransomware initial-access CVEs)

ax330d /mshtml-patcher

MSHTML Patcher Script

Malwareman007 /CVE-2023-21608

Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit

lingjf /h2unit

Light-weight (as light as hydrogen) unit test framework for C/C++, since 2012

moscovium-mc /Tor-0day-JavaScript-Exploit

Firefox/Tor Browser 0day exploit analysis (CVE-2024-9680) A UAF in animation timelines leading to RCE. Patched.