EUVD-2026-90185

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering,...

CVE-2026-47493

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver . This flaw allows a guest to access privileged host GPU resources for which it is not authorized. Successful exploitation could result in code execution , escalation of privileges , data tampering , deni...

CVE-2026-47493: Missing Authorization

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering,...

PT-2026-103353

🚨 CVE-2026-47493 NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

qiomem

説明 Toshiba qiomem.sys をリング3から使用した任意の物理メモリ読み取り/書き込み（4GBまでの物理アドレスでのみ動作します）。 Driver は Microsoft Update Catalog から配布されています。その他の variants。Microsoft Vulnerable Driver List には記載されておらず、過去に CVE も割り当てられていません。 最初に acpi.exe を実行して偽のデバイスを作成し、次に main.exe を実行します。Writeup...

ROS-20260928-73-0061

The vulnerability of the mpcrcvdsweepreq function in the drivers/s390/net/ctcmmpc.c file of the S390 Linux operating system kernel driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-100078

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to function The first argument to iwlmeiwritecyclicbuf should be the cldev but the qhead pointer is passed instead. Fix it...

Linux Distros Unpatched Vulnerability : CVE-2026-97982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: cortina: Fix budget accounting The gmacrx function returns the remaining NAPI budget, but its caller treats the return value as the number of...

CVE-2026-97519 drm/xe: Fix null pointer dereference in devcoredump cleanup

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix null pointer dereference in devcoredump cleanup In xedevcoredumpsnapshotfree, ss-gt may be NULL when the snapshot was never fully populated e.g., when cleanup is triggered without a prior capture. Guard the...

CVE-2026-93220 sched_ext: Keep kick_sync waiting on the rq's own CPU

In the Linux kernel, the following vulnerability has been resolved: schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against live in that CPU's percpu area and the busy-wait runs with the rq loc...

Exploit for CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W...

ROS-20260924-73-0053

The vulnerability of the isertwaitconn function in the drivers/infiniband/ulp/isert/ibisert.c module of the RTRS server and client kernel driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260924-73-0094

The vulnerability of the msmdrmuninit function in the driver/gpu/drm/msm/msmdrv.c file of the Direct Rendering Infrastructure DRI kernel driver of the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability can allow a remote attacker to cause a service...

ROS-20260923-73-0102

The vulnerability of the Linux operating system’s DVB kernel driver is related to the use of previously freed memory in the drivers/media/dvb-core/dvbcaen50221.c file when the device is closed, provided that it was turned off beforehand. Exploiting this vulnerability can allow an attacker to caus...

ROS-20260923-73-0075

The vulnerability of the qmiDecodeStringElem function in the drivers/soc/qcom/qmiEncDec.c module of the SOC kernel driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17. Microsoft's own...

PT-2026-95964

Name of the Vulnerable Software and Affected Versions Watchdog WatchDog Antivirus version 1.8.640 driver versions 1.3.0.0 and earlier Description Missing authorization in the IOCTL handlers of the wsdkd.sys kernel drivers allows local, low-privileged attackers to delete arbitrary files with SYSTE...

CVE-2026-93689

CVE-2026-93689 is a null pointer dereference in the WinFsp kernel driver's Fast I/O device control handler, affecting versions through 2.2.26215 . The handler fails to validate the volume context before use, allowing an unprivileged local user to trigger a denial of service (system crash) by open...

CVE-2026-93689 WinFsp through 2.2.26215 NULL Pointer Dereference via Fast I/O

WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing...

SUSE CVE-2026-92481

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: free EINT resources on unbind mtkeintdoinit creates an IRQ domain, populates it with a mapping for every EINT line and installs a chained handler on the parent interrupt, but none of these are ever released. Th...