CVE-2026-41088

CVE-2026-41088 affects Windows: External control of file name or path in the Windows Ancillary Function Driver for WinSock can allow an authorized local user to elevate privileges. The available connected records corroborate the issue description (Windows WinSock driver path/name control enabling...

CVE-2026-40407

CVE-2026-40407 describes a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that permits an authorized, local attacker to elevate privileges. The vulnerability impact is local privilege escalation with a CVSS v3.1 base score of 7.8 (HIGH) and impact to confidentialit...

CVE-2026-35422 Windows TCP/IP Driver Security Feature Bypass Vulnerability

...

Windows Kernel-Mode Driver Remote Code Execution Vulnerability

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Windows TCP/IP Driver Security Feature Bypass Vulnerability

Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network...

PT-2026-40092

Unchecked return value for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result ma...

Advisory ROSA-SA-2026-3264

Software: kernel 4.18.0 OS: ROSA Virtualization 3.1 unaffected versions = kernel-4.18.0-553.123.1.el810 affected versions lock, allowing a local attacker to cause a denial of service or execute arbitrary code when frequently switching a thread simultaneously with opening/closing a related...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from out-of-bounds array index access in the ntbhwswitchtec driver. This vulnerability may lead to...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the q6asm driver failing to properly discard DSP responses with closed data streams, potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-31763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: gyro: mpu3050: Fix incorrect freeirq variable The handler for the IRQ part of this driver is mpu3050-trig but, in the teardown freeirq is called with handl...

EnTech Taiwan TVicPort 输入验证错误漏洞

EnTech Taiwan TVicPort is a driver development component provided by EnTech Taiwan, which allows users to access hardware ports and control underlying devices. There are input validation vulnerabilities in the EnTech Taiwan TVicPort Product v4.0 version and File v5.2.1.0 version. These...

The vulnerability of the rtw89.Append ProbeReq_ie() function in the driver/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89.Append ProbeReqie function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to cause a service...

The vulnerability of the vub300_enable_sdio_irq() function in the drivers/mmc/host/vub300.c file of the MMC/SD/SDIO driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vub300enablesdioirq function in the drivers/mmc/host/vub300.c file of the Linux kernel’s MMC/SD/SDIO driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerability of the kgd2kfd_suspend() function in the drivers/gpu/drm/amd/amdkfd/kfd_device.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. This vulnerability allows a hacker to cause a service failure.

Vulnerability of the kgd2kfdsuspend function in the drivers/gpu/drm/amd/amdkfd/kfddevice.c module – The driver for AMD GPU Direct Rendering Infrastructure support in Linux operating systems is vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this...

CVE-2025-70795

STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabli...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007446)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007446 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbcbulkwrite fails, the valu...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the driver for enabling Storage Spaces Controller on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the driver responsible for providing functionality for Storage Spaces in Windows operating systems involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...