abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the ONOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and...

Important: Red Hat Security Advisory: abrt security update

An update for abrt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

CVE-2026-94129

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

CVE-2026-94128

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

EUVD-2026-83824

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

CVE-2026-94129 BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

CVE-2026-94128

BioStar VIVID LED DJ 4.0.2411.1500 contains a write-what-where vulnerability in the IOCTL Handler (function sub_1105C of BS_LED64.sys). Manipulation of the AssociatedIrp argument allows a local attacker with low privileges to corrupt memory, leading to high impact on confidentiality, integrity, a...

EUVD-2026-83823

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

PT-2026-96036

Name of the Vulnerable Software and Affected Versions Hangzhou Shunwang Technology shzh version 10.7.2.693 Description A local issue exists within the IRP MJ DEVICE CONTROL Handler component in the shdrv x64.sys file. Specifically, the sub 180004AC0 function does not properly handle the PID...

CVE-2026-94137: Improper Resource Shutdown or Release

A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub180004AC0 of the file shdrvx64.sys of the component IRPMJDEVICECONTROL Handler. The manipulation of the argument PID leads to denial of service. The attack must be carried out locally...

RHEL 8 : abrt (RHSA-2026:69116)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69116 advisory. The Automatic Bug Reporting Tool ABRT recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABR...

CVE-2026-94424: Heap-based Buffer Overflow

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...

CVE-2026-94403: Untrusted Pointer Dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-94096: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/networktools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched...

CVE-2026-94142: Write-what-where Condition

A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub1105C of the file BSHWMIO64W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where...

CVE-2026-94129: Write-what-where Condition

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

CVE-2026-94128: Write-what-where Condition

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

CVE-2026-94146: Write-what-where Condition

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

CVE-2026-94216: Improper Neutralization of CRLF Sequences in HTTP Headers

A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is possible to launch the attack...

PT-2026-96223

Name of the Vulnerable Software and Affected Versions ColorFul iGameCenter version 1.0.3.4 Description A weakness exists in the IOCTL Handler component within the ene.sys library. Specifically, the sub 140001AF0 function is susceptible to untrusted pointer dereference, which occurs when a program...