13094 matches found
CVE-2026-16006
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.Refer t...
kernel: nvmet-rdma: handle inline data with a nonzero offset
A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...
CVE-2026-16006
CVE-2026-16006 is an exposure of sensitive system information vulnerability in the ASUS Armoury Crate driver . A local user with low privileges can send a crafted IOCTL request that bypasses the driver's verification mechanism, allowing them to obtain kernel virtual addresses and gain insight int...
CVE-2026-76967
creationtimestamp| type| source ---|---|--- 2026-09-08 02:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxwh5e3xh2b...
CVE-2026-58240
creationtimestamp| type| source ---|---|--- 2026-09-08 00:48:53+00:00| seen| https://bsky.app/profile/suriq.io/post/3muxsgolk5j2r 2026-09-08 02:07:22+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muxwszdd352g 2026-09-08 04:02:24+00:00| seen|...
CVE-2026-86538
creationtimestamp| type| source ---|---|--- 2026-09-08 00:04:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpxaxrxg2b 2026-09-18 17:00:28+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/58eb925f-807c-4a80-aebc-629f77cefdae...
CVE-2026-86542
creationtimestamp| type| source ---|---|--- 2026-09-08 00:03:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpux7hsz22 2026-09-08 10:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muyrs6o7z42n...
VulnCheck KEV: CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...
PT-2026-87279
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...
PT-2026-88705
Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
PT-2026-88553
Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88690
Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3270)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302 netfilter: ctnetlin...
PT-2026-88504
Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...
PT-2026-88218
In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87441
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
PT-2026-87917
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally...
PT-2026-88003
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...