EUVD-2026-56371

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62747

CVE-2026-62747 is a heap-based buffer overflow in Windows Device Association Service that enables a locally authenticated attacker to elevate privileges. Exploit details are not provided in the connected documents, and no specific patch/version is listed here; CVSS v3.1 base score is 7.8 ( HIGH )...

CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability

...

CVE-2026-68333

A flaw was found in the dpaa2-switch component of the Linux kernel. When a MAC Media Access Control object is disconnected, the system fails to release a reference to the associated MAC endpoint device. This oversight causes a device reference to leak with every successful connection and subseque...

CVE-2026-68240

A flaw was found in the Linux kernel's drm/gpusvm component. When drmgpusvmgetpages encounters an error during page mapping, it fails to properly unmap previously created device mappings. This oversight can lead to a device mapping leak, consuming system resources and potentially impacting system...

CVE-2026-68215

A flaw was found in the Linux kernel's radio-si476x media driver. During the device probing process, if certain initialization steps fail, the v4l2device may not be properly unregistered. This oversight can lead to a resource leak, specifically a persistent parent device reference. A local attack...

CVE-2026-68178

A flaw was found in the Linux kernel's NSM Network Shared Memory misc device. A local user could exploit this by opening the /dev/nsm device and then unloading the NSM module. This allows a subsequent operation ioctl on the open file descriptor to call into memory that has been deallocated,...

CVE-2026-68375

A flaw was found in the Linux kernel's bnxten driver, which handles Broadcom NetXtreme-C/E network adapters. The bnxtauxdevicesinit function calls auxiliarydeviceinit before all required fields for the release callback are fully initialized. If a memory allocation fails after auxiliarydeviceinit...

CVE-2026-20908

Time-of-check time-of-use race condition for the IntelR NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

CVE-2026-20886

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

EUVD-2026-56506

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20878

The vulnerability CVE-2026-20878 affects Intel PROSet/Wireless WiFi Software for Windows, specifically within Ring 2: Device Drivers. It involves a null pointer dereference that can allow a denial-of-service condition. An unauthenticated network-adjacent attacker with low complexity could trigger...

CVE-2026-20789

CVE-2026-20789 describes an improper access control vulnerability in Intel(R) PROSet/Wireless WiFi Software for Windows, specifically within Ring 2: Device Drivers. The issue could let an unprivileged, unauthenticated local attacker achieve local code execution with no user interaction, via a low...

EUVD-2026-56500

Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

EUVD-2026-56498

Improper conditions check in the firmware for the IntelR NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

EUVD-2026-56497

Uncontrolled resource consumption for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2026-20776

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...

EUVD-2026-56486

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via...

CVE-2026-20749

CVE-2026-20749 concerns an out-of-bounds read in some Intel PROSet/Wireless WiFi Software components within Ring 2: Device Drivers. The underlying issue may allow a network adversary with no authentication and low attack complexity to escalate privileges, potentially via adjacent access with no u...

CVE-2026-20749

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via...