CVE-2025-48520

The CVE-2025-48520 issue is an improper input validation vulnerability in the AMD Platform Management Framework (PMF) driver. It could allow a local attacker to read Out-of-Bounds, potentially leading to information disclosure or a crash. Root cause: improper input validation within the PMF drive...

CVE-2026-41911

CVE-2026-41911 affects the OpenClaw project: OpenClaw prior to 2026.4.8 contains a filesystem policy bypass during docx upload processing that allows local file reads outside the workspace boundaries. Attackers can exploit the upload_file and upload_image endpoints to access files beyond the inte...

Intel CPU Foreshadow-NG (foreshadow next generation version) vulnerability (CNVD-2018-15494)

The L1 endpoint failure VMM vulnerability, like CVE-2018-3620, belongs to Foreshadow-NG foreshadowed next-generation version, and similarly, other vendor CPUs may be affected as well.Using the speculation of executing side-channel attacks, an attacker with local user access privileges can achieve...