Performance Counters for Windows Elevation of Privilege Vulnerability

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

CVE-2026-25165: NULL Pointer Dereference

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

PT-2026-24292

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in Windows Performance Counters related to pointer dereferencing. Successful exploitation could allow an attacker to gain elevated privileges. The issue involves a null pointer...

The vulnerability of the imon.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the imon.c component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Unbreakable Enterprise kernel security update

5.4.17-2136.353.3 - xfrm: flush all states in xfrmstatefini Sabrina Dubroca Orabug: 38934000 - xfrm: also call xfrmstatedeletetunnel at destroy time for states that were never added Sabrina Dubroca Orabug: 38934000 - Revert 'xfrm: destroy xfrmstate synchronously on net exit path' Sabrina Dubroca...

The vulnerability of the calibrate_ccount() function in the arch/xtensa/kernel/time.c module of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the calibrateccount function in the arch/xtensa/kernel/time.c module of the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the machine_setup() function in the arch/xtensa/platforms/xtfpga/setup.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the machinesetup function in the arch/xtensa/platforms/xtfpga/setup.c module of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

Control Flow Reconstruction using HPCs

Affected Products and Mitigation Performance counters are not protected by Secure Encrypted Virtualization SEV, SEV-ES, or SEV-SNP. AMD has defined support for performance counter virtualization in APM Vol 2, section 15.39. Performance Monitoring Counters PMC virtualization, available on AMD...

CVE-2026-2539

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool e.g., SDR can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication...

CVE-2026-2539

The CVE-2026-2539 affects the Micca KE700 car alarm system where the RF protocol transmits data frames in cleartext. The vulnerability arises because random numbers and counters used for authentication are captured via radio interception, enabling an attacker to obtain sensitive authentication-re...

CVE-2026-2539 Micca KE700 Cleartext transmission of key fob ID

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool e.g., SDR can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication...

PT-2026-8234

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool e.g., SDR can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication...

Micca KE700 安全漏洞

The Micca KE700 is a source bookshelf speaker from the Micca company. The Micca KE700 has a security vulnerability, which stems from unencrypted data frames in the RF communication protocol. This vulnerability may allow attackers to capture plaintext transmitted random numbers and counters, there...

The vulnerability of the f2fsPutSuper() function in the fs/f2fs/super.c module of the F2FS file system in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the f2fsputsuper function in the fs/f2fs/super.c module of the F2FS file system in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out ...

The vulnerability of the `ksmbd_conn_init_server_callbacks()` function in the `fs/smb/server/connection.c` module of the SMB server support module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ksmbdconninitservercallbacks function in the fs/smb/server/connection.c module of the SMB server support module in the Linux operating system is related to errors in resource usage counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

Hydra: Robust Hardware-Assisted Malware Detection

Malware detection using Hardware Performance Counters HPCs offers a promising, low-overhead approach for monitoring program behavior. However, a fundamental architectural constraint, that only a limited number of hardware events can be monitored concurrently, creates a significant bottleneck,...

UBUNTU-CVE-2025-67125

A signed integer overflow in docopt.cpp v0.6.2 LeafPattern::match in docoptprivate.h when merging occurrence counters e.g., default LONGMAX + first user "-v/--verbose" can cause counter wrap negative/unbounded semantics and lead to logic/policy bypass in applications that rely on occurrence-based...

CVE-2025-67125

A signed integer overflow in docopt.cpp v0.6.2 LeafPattern::match in docoptprivate.h when merging occurrence counters e.g., default LONGMAX + first user "-v/--verbose" can cause counter wrap negative/unbounded semantics and lead to logic/policy bypass in applications that rely on occurrence-based...

CVE-2025-67125

A signed integer overflow in docopt.cpp v0.6.2 LeafPattern::match in docoptprivate.h when merging occurrence counters e.g., default LONGMAX + first user "-v/--verbose" can cause counter wrap negative/unbounded semantics and lead to logic/policy bypass in applications that rely on occurrence-based...