201 matches found
CVE-2026-78508
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-78454
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...
CVE-2026-69561
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69283
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-78454
An out-of-bounds read in the Windows CD-ROM Driver allows a local, low-privilege attacker to achieve information disclosure . The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low complexity, and high confidentiality impact with no integrity or availability impact. CISA's SSV...
EUVD-2026-73808
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...
EUVD-2026-73518
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69561
CVE-2026-69561 is an out-of-bounds read vulnerability in the Windows CD-ROM Driver that allows an authorized attacker to achieve local privilege escalation . The flaw resides in how the driver reads memory beyond its allocated bounds, potentially allowing an attacker with local low-privilege acce...
CVE-2026-69283
CVE-2026-69283 is a heap-based buffer overflow in the Windows CD-ROM Driver that allows an authorized local attacker to elevate privileges . The vulnerability requires low privileges , no user interaction , and has low attack complexity , resulting in a CVSS 3.1 score of 7.8 (HIGH) with High impa...
EUVD-2026-73436
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-78508
CVE-2026-78508 is an out-of-bounds read in the Windows CD-ROM Driver that allows an unauthorized attacker with physical access to disclose information. The CVSS 3.1 score is 4.6 (MEDIUM) , reflecting the physical attack vector, low complexity, no privileges required, and a high confidentiality im...
EUVD-2026-73309
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack...
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-71566 KubeVirt backend is not authenticated
FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. However, KubeVirt relies on a KUBECONFIG file mounted to the container and completely ignores the credentials. This allows any user of the...
CVE-2026-68184
A flaw was found in the Linux kernel's CD-ROM cdrom driver. When handling the CDROMVOLCTRL command, the mmcioctlcdromvolume function can perform an incorrect calculation of buffer length after a pointer adjustment. This leads to a stack out-of-bounds read, where 8 bytes of data beyond the intende...
CVE-2026-68184
The CVE-2026-68184 issue affects the Linux kernel CD-ROM code, specifically mmc_ioctl_cdrom_volume for CDROMVOLCTRL. A 32-byte stack buffer is used to read the audio control mode page (buflen 24, then extended if a block descriptor is present). The function later builds a MODE SELECT payload by m...
CVE-2021-22045
VMware ESXi 7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG, VMware Workstation 16.2.0 and VMware Fusion 12.2.0 contains a heap-overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able t...