29721 matches found
EUVD-2026-56594
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...
EUVD-2026-56309
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2025-61970
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...
CVE-2026-68253
A flaw was found in the Linux kernel's drm/i915/hdcp component, which handles display-related operations. This vulnerability arises because a check for buffer overflow is performed after the overflow has already occurred during a write operation. This improper handling of memory boundaries can le...
CVE-2026-68275
A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker, with the ability to issue ioctl commands to the render group, could trigger a null pointer dereference by requesting mapping information for an unmapped buffer object. This could lead to a system crash, resulting ...
CVE-2026-68208
A flaw was found in the Linux kernel's media subsystem ti: vpe. An incorrect error check in the vipprobeslice function, specifically when handling memory allocation failures from devmkzalloc, could lead to a denial of service. A local attacker could potentially exploit this to cause system...
CVE-2026-68380
A flaw was found in the Linux kernel's AMD XDNA accelerator driver. The amdxdnacmdsubmit function improperly handles references to the mmstruct when scheduling jobs. This can lead to a use-after-free vulnerability, where the mmstruct is deallocated before the job scheduler can access it. A local...
DEBIAN-CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...
DEBIAN-CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...
CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...
CVE-2026-68416
A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When an error occurs during the addition of an MTD device partition, the error handling routines can attempt to free the same memory region twice. This also causes a warning due to the partition node still being linked...
CVE-2026-68259
A flaw was found in the Linux kernel. A missing bounds check in the allocateeventnotificationslot function within the drm/amdkfd component allows a local attacker to provide an out-of-bounds event ID. This could lead to memory corruption, potentially resulting in a denial of service or privilege...
CVE-2026-68189
A flaw was found in the Bluetooth hcisync component of the Linux kernel. A race condition during the UUID list traversal, caused by improper synchronization between asynchronous command sync work and UUID list updates, can lead to a use-after-free vulnerability. This could allow a local attacker ...
CVE-2026-68169
A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. A race condition in the mptcppmuserspacegetlocalid function allows a memory address entry to be freed while still being referenced. A local attacker could exploit this use-after-free vulnerability, potentially leading to a syst...
CVE-2026-6726 An information leakage vulnerability in the TCG TPM 2.0 reference code.
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation of the TCG TPM 2.0 reference code . A privileged local attacker with access to the TPM command interface can exploit timing discrepancies to recover information, potentially allowing the decryption of ciphertexts...
CVE-2026-19143
A flaw was found in Google Chrome on Android. This vulnerability, related to insufficient validation of untrusted input in WebAPKs, allows a local attacker to perform a sandbox escape. By crafting and using a malicious file, an attacker can bypass security restrictions designed to isolate...
Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...