CVE-2026-94424 Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...

CVE-2026-94424

CVE-2026-94424 affects the Moore Threads MTT S80 Driver Package up to version 340.150 . The vulnerable component is the function sub_140001000 in the kernel-mode library mtdispkm64.sys , specifically within the IOCTL Handler , where a heap-based buffer overflow can be triggered through manipulati...

EUVD-2026-84160

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...

CVE-2026-81469

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges...

EUVD-2026-84105

Dell Command | Monitor DCM, versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-81469

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges...

CVE-2026-81469

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges...

CVE-2026-82165

Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-94403 ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

EUVD-2026-84051

Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-49810

Dell Command Powershell Provider DCPP, versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 ( runtime, metadb, ui, spark) images by vulnerabilities in gnupg2 package

Summary Impacted IBM Optim 1.0.0, 1.1.0 runtime, metadb, ui, spark images by vulnerabilities in gnupg2 package. IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the packages to fixed versions 2.3.3-5.el97. Vulnerability Details CVEID:CVE-2025-68973 DESCRIPTION: In GnuPG before 2.4.9,...

CVE-2026-55567

BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent directory before deletion. A local unprivileged user can replace that directory with a Windows junction and use a native symlink to redirect...

libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

CVE-2026-94146

BioStar BIOS Update Utility 1.9.7.3 contains a write-what-where flaw in the IOCTL Handler (function sub_110BC of BSMEM64_W10.sys), triggered by manipulating the PhysicalAddress/Size argument. A local attacker with low privileges can achieve high impact on confidentiality, integrity, and availabil...

EUVD-2026-83847

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

CVE-2026-94146 BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

CVE-2026-94146 BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

CVE-2026-94142 BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where

A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub1105C of the file BSHWMIO64W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where...

CVE-2026-94142

BioStar Temperature Monitor Utility 1.2.1806.2200 contains a write-what-where vulnerability in the IOCTL Handler component, specifically in the function sub_1105C of the kernel driver BS_HWMIO64_W10.sys . Manipulation of the PhysicalAddress argument allows a local attacker with low privileges to ...