Lucene search
+L

10 matches found

NVD
NVD
•added 2026/09/21 7:16 a.m.•17 views

CVE-2026-94146

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

9.3CVSS0.00182EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/21 7:00 a.m.•12 views

CVE-2026-94146 BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

9.3CVSS7.3AI score0.00182EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/21 7:00 a.m.•16 views

EUVD-2026-83847

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

9.3CVSS7.3AI score0.00182EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/21 7:00 a.m.•53 views

CVE-2026-94146 BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

9.3CVSS0.00182EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/21 7:00 a.m.•33 views

CVE-2026-94146

BioStar BIOS Update Utility 1.9.7.3 contains a write-what-where flaw in the IOCTL Handler (function sub_110BC of BSMEM64_W10.sys), triggered by manipulating the PhysicalAddress/Size argument. A local attacker with low privileges can achieve high impact on confidentiality, integrity, and availabil...

9.3CVSS7.3AI score0.00182EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•4 views

PT-2026-96047

Name of the Vulnerable Software and Affected Versions BioStar BIOS Update Utility version 1.9.7.3 Description A write-what-where condition exists in the IOCTL Handler component within the sub 110BC function of the BSMEM64 W10.sys file. This issue occurs when the PhysicalAddress and Size arguments...

9.3CVSS5.8AI score0.00182EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•9 views

CVE-2026-94146: Write-what-where Condition

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

9.3CVSS7.3AI score0.00182EPSS
SaveExploits0References3
CNVD
CNVD
•added 2018/10/12 12:00 a.m.•16 views

Intel NUC FW kits input validation error vulnerability

Intel NUC FW kits is a mini-desktop from Intel Corporation USA.BIOS update utility is one of the BIOS update utilities. An input validation error vulnerability exists in Intel NUC FW kits. An attacker could exploit this vulnerability to cause a denial of service or information disclosure...

6CVSS6.7AI score0.00329EPSS
SaveExploits0References1
CVE
CVE
•added 2018/10/10 6:00 p.m.•54 views

CVE-2018-12158

The CVE-2018-12158 issue affects Intel NUC Firmware Kits’ BIOS update utility. Insufficient input validation in the BIOS update executable for kits downloaded before May 24, 2018 could allow a local, privileged user to trigger a denial of service or information disclosure. Affected devices are In...

6CVSS5.7AI score0.00329EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/10 12:00 a.m.•5 views

CVE-2018-12158: Exposure of Sensitive Information to an Unauthorized Actor

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access...

6CVSS6.6AI score0.00329EPSS
SaveExploits0References2
Rows per page
Query Builder