{"data":{"id":"ff752be6-081e-42b2-9a94-f6f74f60f583","title":"FORGE Lab uses agentic tools to identify memory safety issues in Rust","summary":"Microsoft's FORGE Lab found memory-safety bugs in Rust's standard library (std and core), including cases where safe Rust code can trigger undefined behavior. The team used Hyenas, its research version of codename MDASH, an AI-powered vulnerability-scanning system, to investigate three recurring patterns of misplaced trust in unsafe code. Two of the reported issues remained open at publication.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://www.microsoft.com/en-us/security/blog/2026/11/09/forge-lab-uses-agentic-tools-to-identify-memory-safety-issues-in-rust/","publishedAt":"2026-11-09T20:17:31.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Microsoft FORGE Lab","Hyenas","MDASH","GitHub Copilot agent runtime","Rust"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-09T20:17:31.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","safety"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.6,"researchCategory":null,"atlasIds":null}}