CVE-2026-19293

SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...

CVE-2026-19293 SMP security request

SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...

CVE-2026-19293

The vulnerability CVE-2026-19293 concerns the BLE SMP (Security Manager Protocol) security request where the peripheral omits the maximum supported encryption key size. This omission can allow brute-forcing of the key more easily for an adjacent attacker. The entry cites the BLERP paper and provi...

CVE-2026-59916

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

CVE-2026-46731

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

CVE-2026-46731

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

EUVD-2026-57510

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

CVE-2026-59917

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

CVE-2026-59917

Dell Display and Peripheral Manager (DDPM) for Windows, versions prior to 2.3.0.17, suffer an Improper Access Control vulnerability. A low-privileged, local attacker could exploit this to achieve Elevation of Privileges and arbitrary code execution. Remediation is to upgrade DDPM Windows to versi...

CVE-2026-59917

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

CVE-2026-59916

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

CVE-2026-59916

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

CVE-2026-59916

CVE-2026-59916 affects Dell Display and Peripheral Manager (DDPM) for Windows, prior to version 2.3.0.17. The issue is described as an Improper Access Control vulnerability that could allow a low-privileged attacker with local access to achieve Elevation of Privileges and potentially arbitrary co...

PT-2026-71223

Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager DDPM Windows versions prior to 2.3.0.17 Description Improper Access Control allows a low privileged attacker with local access to potentially achieve Elevation of Privileges and execute arbitrary code...

CVE-2026-68382

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously. If the final device put happens from a destroy worker, drmm cleanup can end up draining the same workqueue and deadlock...

CVE-2026-68382

CVE-2026-68382 relates to the Linux kernel drm/xe/guc driver. The issue is a race during asynchronous destruction of GuC execution queues: if the final device reference is released while destruction is still pending, DRM cleanup may drain the same workqueue and deadlock. Mitigation implemented in...

EUVD-2026-55393

In the Linux kernel, the following vulnerability has been resolved: ice: prevent tstamp ring allocation for non-PF VSI types The pf-txtimetxqs bitmap tracks which Tx queues have ETF Earliest TxTime First offload enabled. This bitmap is indexed by queue number and is set by iceoffloadtxtime, which...

EUVD-2026-55319

In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free allocated workqueue Destroy allocated workqueue in remove callback to free its resources, thus fixing memory leak...

CVE-2026-68176

The CVE-2026-68176 entry concerns the Linux kernel tracing subsystem (mmiotrace) where a NULL dereference could occur if mmio_pipe_open() fails to locate a PCI device and hiter->dev is NULL. The read() path previously dereferenced hiter->dev without verifying it; the fix adds a check for hi...

CVE-2026-68176 tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter-dev If the mmiopipeopen fails to find a PCI device, the hiter-dev will be assigned to NULL. The mmiotrace read function dereferences the hiter-dev if hiter exists. Chang...