CVE-2026-81581

Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...

CVE-2026-81581 User input in WibuKey is used (without proper sanitization) to compute the address of a pointer, which can be exploited to let the user point to any storage, to which Windows responds with a denial of service.

Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...

EUVD-2026-66985

Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...

CVE-2026-81581

WibuKey up to 6.70 for Windows contains an improper validation of memory boundaries vulnerability in its WibuKey64.sys kernel driver. User input is used without proper sanitization to compute a pointer address, allowing an attacker to point to arbitrary memory outside the driver's scope. The typi...

EUVD-2026-66984

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

PT-2026-82481

Name of the Vulnerable Software and Affected Versions WibuKey versions prior to 6.71 Description Improper validation of memory boundaries in the WibuKey64.sys driver allows an attacker to set pointers outside the program scope. This occurs because user input is used without proper sanitization to...

The vulnerability of the mpfs_sys_controller_probe() function in the drivers/soc/microchip/mpfs-sys-controller.c file of the SOC kernel driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mpfssyscontrollerprobe function in the drivers/soc/microchip/mpfs-sys-controller.c file of the Linux operating system’s SOC System on Chip kernel module is related to improper memory release. Exploitation of this vulnerability can allow a remote attacker to cause a servic...

Malicious code in mega-smart-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15724 Malicious code in mega-smart-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-fast-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15713 Malicious code in mega-fast-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-clean-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15712 Malicious code in mega-clean-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Astra Linux – Vulnerability in Python 3.11

The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class, and therefore does not use io.opencode to read the .pyc files. As a result, the sys.audit handlers for this audit event do not trigger...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arm64: The issue was fixed in the concurrently setting of insnemulation sysctls. The emulationprochandler function changes table-data for procdointvecminmax. However, it may cause an OOPs error if called concurrently with itself:...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. File system bugs due to corrupted images are not considered a CVE for any filesystem that can only be mounted with CAPSYSADMIN in the initial user namespace. This includes delegated mounting...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pps: Fixed a use-after-free On a board running with ntpd and gpsd, I’m encountering a consistent use-after-free in sysexit from gpsd during reboots: pps pps1: Removed ----------- - Cut here----------- kobject: "null"...

BIT-OPENBAO-2026-45808 OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...

PT-2026-72292

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

EUVD-2026-54976

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...