PIL Heap Address Leak Exception (CVE-2026-22778)
Detects the presence of PIL exception messages in application logs that leak heap memory addresses. This is the first stage of the CVE-2026-22778 exploitation chain against vLLM instances used to bypass ASLR.
Microsoft Sentinel (KQL)

