178 matches found
Astra Linux – Vulnerability in Zabbix
Setting the SMS media allows for setting the GSM modem file. This file is later used as a Linux device. But since everything is a file for Linux, it’s possible to set another file, such as a log file. In this case, Zabbixserver will attempt to communicate with it as a modem. As a result, the log...
CVE-2026-83664
Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...
CVE-2026-70132
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83664
The Windows Portable Device File System Driver is vulnerable to a type confusion issue (CWE-843). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation instances are provided...
CVE-2026-70132
A Heap-based buffer overflow exists in the Windows Portable Device File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . Official remediation is available via a patch, and the vulnerability is confirmed with a HIGH base severity score of 7.8....
Windows Portable Device File System Driver Information Disclosure Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...
Windows Portable Device File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70132: Windows Portable Device File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...
PT-2026-112470
Name of the Vulnerable Software and Affected Versions Windows Portable Device File System Driver affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to locally disclose sensitive...
CVE-2026-70132: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83664: Windows Portable Device File System Driver Information Disclosure Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...
CVE-2026-83664: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...
Astra Linux – Vulnerability in Qemu
A flaw was discovered in the implementation of the 9p passthrough filesystem 9pfs in QEMU. The 9pfs server did not prevent the opening of special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared...
EUVD-2026-55279
In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open miscopen installs a misc driver's file operations with fopsget, which pins fileoperations::owner before replacing the file's fop. The NSM misc device leaves nsmdevfops.owner unse...
PT-2026-65430
Name of the Vulnerable Software and Affected Versions AppEngine affected versions not specified Description Improper access restrictions in the AppEngine Fileaccess over HTTP feature allow unauthenticated users to perform read and write operations on sensitive filesystem areas. This exposure...
bind security update
9.18.33-15.0.1.el102.2 - Hard require needed openssl-libs Orabug: 38742109 - Fix warning when changing device file permissions Orabug: 36518580 32:9.18.33-15.2 - Fix GSS-API resource leak CVE-2026-3039 - Invalid handling of CLASS != IN CVE-2026-5946 32:9.18.33-15.1 - Prevent Denial of Service via...
CVE-2026-55117: Improper Limitation of a Pathname to a Restricted Directory
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device...
CVE-2026-45258 Multiple vulnerabilities in the sound(4) mmap path
dspmmapsingle validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could overflow, so that a large offset and length wrapped around and passed the check. The offset was then narrowed from 64 to 32 bits when converted to ...
Siemens ROS# Path traversal vulnerability
Siemens ROS is a robot operating system communication framework based on C and .NET by the German company Siemens. Siemens ROS has a path traversal vulnerability, which arises from incorrect user input that leads to path traversal. Attackers can exploit this vulnerability to access any file on th...
