796 matches found
CVE-2026-78455: Out-of-bounds Read
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-78451: Untrusted Pointer Dereference
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-72999: Out-of-bounds Read
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack...
PT-2026-87839
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-69469: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-71349: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-18269
Kenwood DNR1007XR tchdrbytestreamread Out-Of-Bounds Write Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specif...
CVE-2026-18273
Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...
CVE-2026-18283
Sony XAV-9500ES (digital media player) is affected by an authorization bypass vulnerability in its udev USB rules . A physically present attacker with no authentication can connect a crafted USB device that triggers instantiation of otherwise restricted USB device types, bypassing the system's au...
EUVD-2026-63430
Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-18283 Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability
Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-18267 Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability
Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw...
CVE-2024-13942 Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privileges
Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media SPI NOR or NAND, EMMC or SD. The code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key,...
CVE-2026-62708
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-62699
Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...
CVE-2026-61350
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...
EUVD-2026-56631
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...
EUVD-2026-56348
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an unauthorized attacker to execute code with a physical attack...
