Exploit for CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W...

kernel: net: tun: bound receive headroom

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

kernel: net: tun: bound receive headroom

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

kernel: net: tun: bound receive headroom

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

ASRock IO Driver version 1.00.00.0000 Improper Access Control

ASRock IO Driver version 1.00.00.0000 contains an improper access control vulnerability in AsrDrv103.sys. Included research analyzes the vulnerable driver and its encrypted IOCTL mechanism...

CVE-2026-96749: Integer Overflow or Wraparound

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

CVE-2026-96745: Deserialization of Untrusted Data

Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...

PT-2026-105030

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

PT-2026-105029

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

PT-2026-98039

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description An out-of-bounds write exists in the connection-monitoring logic. An unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection...

PT-2026-98231

Name of the Vulnerable Software and Affected Versions MongoDB Python Driver affected versions not specified Description Client-side field level encryption support may incorrectly interpret a key management endpoint value ending in ".sock" as a local Unix domain socket path instead of a remote hos...

PT-2026-98233

Name of the Vulnerable Software and Affected Versions MongoDB Python Driver affected versions not specified Description An integer overflow exists in the BSON document encoding component of the bundled native extension. This occurs when a single document is constructed using an excessively large...

PT-2026-98038

Name of the Vulnerable Software and Affected Versions MongoDB PHP Driver affected versions not specified Description Deserialization of untrusted data in the command monitoring support allows class names embedded in document content to be honored during the construction of monitoring event object...

CVE-2026-96747

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

ROS-20260924-73-0002

The vulnerability of the peakusbupdatetsnow function in the drivers/net/can/usb/peakusb/pcanusbcore.c file of the Linux network device driver module is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-98119

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the rtw89 wifi driver where the parser fails to verify the length of the PHY status Information Element IE before processing. Because hardware may report a PHY status ...

PT-2026-98098

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the driver core where a warning is incorrectly triggered during the removal of a device while its supplier is in the process of unbinding. This occurs when a consumer...

CVE-2026-97479: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding During driver removal, the following warning can appear: WARNING: CPU: 1 PID: 139 at drivers/base/core.c:1497 devicelinksnodriver+0xcc/0xfc ... Cal...

ROS-20260924-73-0050

The vulnerability of the net FailoverSelectQueue function in the drivers/net/net Failover.c module of the Linux kernel network device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260924-73-0069

The vulnerability of the i40evcconfigqueuesmsg function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c module of the Intel Ethernet network adapter driver for the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an...