CVE-2026-94146

BioStar BIOS Update Utility 1.9.7.3 contains a write-what-where flaw in the IOCTL Handler (function sub_110BC of BSMEM64_W10.sys), triggered by manipulating the PhysicalAddress/Size argument. A local attacker with low privileges can achieve high impact on confidentiality, integrity, and availabil...

CVE-2026-94142 BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where

A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub1105C of the file BSHWMIO64W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where...

CVE-2026-94142

BioStar Temperature Monitor Utility 1.2.1806.2200 contains a write-what-where vulnerability in the IOCTL Handler component, specifically in the function sub_1105C of the kernel driver BS_HWMIO64_W10.sys . Manipulation of the PhysicalAddress argument allows a local attacker with low privileges to ...

EUVD-2026-83835

A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub1105C of the file BSHWMIO64W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where...

CVE-2026-94129

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

CVE-2026-94128

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

CVE-2026-94129 BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

EUVD-2026-83824

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

EUVD-2026-83823

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

CVE-2026-94128

BioStar VIVID LED DJ 4.0.2411.1500 contains a write-what-where vulnerability in the IOCTL Handler (function sub_1105C of BS_LED64.sys). Manipulation of the AssociatedIrp argument allows a local attacker with low privileges to corrupt memory, leading to high impact on confidentiality, integrity, a...

PT-2026-96318

Name of the Vulnerable Software and Affected Versions Moore Threads MTT S80 Driver Package version 340.150 Description Improper privilege management exists within the IOCTL Handler component of the mtdispkm64.sys library. Specifically, the sub 140006F0C function can be manipulated by a local...

CVE-2026-94128: Write-what-where Condition

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

PT-2026-96033

Name of the Vulnerable Software and Affected Versions BioStar VIVID LED DJ version 4.0.2411.1500 Description A write-what-where condition exists in the IOCTL Handler component within the BS LED64.sys file. This issue occurs in the sub 1105C function when the AssociatedIrp argument is manipulated....

PT-2026-96039

Name of the Vulnerable Software and Affected Versions BioStar Temperature Monitor Utility version 1.2.1806.2200 Description A write-what-where condition exists in the IOCTL Handler component within the file BS HWMIO64 W10.sys. This issue occurs in the sub 1105C function when the PhysicalAddress...

CVE-2026-94142: Write-what-where Condition

A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub1105C of the file BSHWMIO64W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where...

CVE-2026-94403: Untrusted Pointer Dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

PT-2026-96047

Name of the Vulnerable Software and Affected Versions BioStar BIOS Update Utility version 1.9.7.3 Description A write-what-where condition exists in the IOCTL Handler component within the sub 110BC function of the BSMEM64 W10.sys file. This issue occurs when the PhysicalAddress and Size arguments...

PT-2026-96223

Name of the Vulnerable Software and Affected Versions ColorFul iGameCenter version 1.0.3.4 Description A weakness exists in the IOCTL Handler component within the ene.sys library. Specifically, the sub 140001AF0 function is susceptible to untrusted pointer dereference, which occurs when a program...

CVE-2026-94424: Heap-based Buffer Overflow

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...

CVE-2026-94129: Write-what-where Condition

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...