Skip to content
Threat Feed

Tag

Memprocfs

2 briefs RSS
high advisory

MemProcFS DLL and Shared Library Hijacking Vulnerability

MemProcFS before 5.17 is susceptible to DLL and shared-library hijacking due to unsafe library-loading patterns, allowing attackers to achieve arbitrary code execution by placing malicious libraries or manipulating the library search path.

dll-hijacking library-hijacking code-execution memprocfs cve-2026-40031
2r 3t 1c
high advisory

MemProcFS Usage for Memory Dump Mounting and Credential Access

Adversaries use MemProcFS, a memory forensics tool, to mount memory dumps as virtual file systems and extract sensitive information like credentials from LSASS or registry hives.

credential-access memory-dump memprocfs
2r 3t