CVE-2026-19193-PoC

CVE-2026-19193 - Proof of Concept Beendigung beliebiger Prozesse über einen nicht authentifizierten Minifilter-Nachrichtenhandler im Kernel-Treiber von Jiangmin Antivirus kvcore.sys Betroffenes Asset: Produkt: Jiangmin Antivirus V21 Komponente: kvcore.sys Zentraler Kernel-Treiber Version: 1.23.6....

qiomem

Beschreibung Beliebige physische Speicher-Lese-/Schreibzugriffe über den Toshiba-Treiber qiomem.sys aus Ring 3 funktioniert nur bis zu 4 GB physische Adressen. Driver wird über den Microsoft Update-Katalog verteilt. Andere Varianten. Nicht in der Microsoft Vulnerable Driver List enthalten, es wur...

WiseDelete

Wrapper del Driver WiseDelfile Un'utilità Windows leggera che carica il driver kernel WiseDelfile64.sys , esegue l'handshake del dispositivo richiesto e invia richieste IOCTL per eliminare file che non possono essere rimossi tramite le API Windows standard. Questo progetto dimostra come...

CVE-2026-38765

CVE-2026-38765 Un problema in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 consente a un attaccante locale di elevare i privilegi tramite il driver del kernel pgsecdl.sys...

CVE-2026-38764

CVE-2026-38764 Ein Problem in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 ermöglicht einem lokalen Angreifer die Eskalation von Privilegien über den Kernel-Treiber pgsecdl.sys...

CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC Projektdatum: Feb 2026 / Entdeckte eine Pufferüberlauf-Schwachstelle im IOCTL-Handler des Kernel-Treibers pwdrvio.sys. Die Schwachstelle ermöglicht es einem unprivilegierten lokalen Angreifer, Kernel-Pool-Speicher zu beschädigen, was einen sofortigen Systemabstu...

Interceptor

Interceptor Autore: @Cerbersec Interceptor è un driver kernel focalizzato sulla manomissione di soluzioni EDR/AV nello spazio kernel, tramite la patch delle callback del kernel e l'hooking degli IRP. Interceptor è stato creato durante uno stage presso il Red Team di NVISO Security. I relativi...

CVE-2026-80698

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

CVE-2026-80618

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpuamdkfdgpuvmfreememoryofgpu unpinned DOORBELL and MMIO remap BOs which are pinned at allocation time before checking whether the BO is still mapped to the GPU. When...

Linux Distros Unpatched Vulnerability : CVE-2026-80710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct...

CVE-2026-81579

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

EUVD-2026-66984

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

CVE-2026-81579 An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

CVE-2026-81579

WibuKey for Windows (versions before 6.71 ) is affected by an untrusted pointer dereference in the WibuKey2_64.sys kernel driver (64-bit Windows), which exposes a write-what-where primitive. This enables a local unprivileged user to escalate privileges, potentially executing arbitrary code, spawn...

PT-2026-82480

Name of the Vulnerable Software and Affected Versions WibuKey for Windows versions prior to 6.71 Description An untrusted pointer dereference in the WibuKey2 64.sys kernel driver for 64-bit Windows allows a local attacker to exploit a write-what-where primitive. This primitive enables local...

CVE-2026-80577 drm/panthor: skip zero-sized firmware sections

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthorfwloadsectionentry skips BO creation when the firmware section VA range is empty. If such a section is added to the firmware section list, section-mem is left as NULL. Later...

CVE-2026-80564 gve: fix NULL dereference due to missing ptp adjfine

In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows: sudo ./testptp -d /dev/ptp0 -f 0 551.943697 BUG: kernel NULL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098668 advisory. Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

ROS-20260826-73-0021

The vulnerability of the aspeedsocinfoinit function in the drivers/soc/aspeed/aspeed-socinfo.c module of the Linux SOC kernel driver is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the rvu_mbox_handler_cgx_set_link_mode() and _sdp_init() functions in the Ethernet adapter driver for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the rvumboxhandlercgxsetlinkmode and sdpinit functions in the Ethernet adapter driver for Linux operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...