Lucene search
+L

796 matches found

NVD
NVD
•added 2026/01/13 6:16 p.m.•15 views

CVE-2026-20828

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS0.00653EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/13 5:57 p.m.•11 views

CVE-2026-20936

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack...

4.3CVSS5.7AI score0.00486EPSS
SaveExploits0References2Affected Software23
CVE
CVE
•added 2026/01/13 5:57 p.m.•89 views

CVE-2026-20936

CVE-2026-20936 is an information-disclosure vulnerability in Windows NDIS (network data path). The issue is an out-of-bounds read in the NDIS driver that could allow an authorized attacker with physical access to disclose data. In the Nessus/NCSC/NVD entries, the CVE is flagged under Windows NDIS...

4.3CVSS5.7AI score0.00486EPSS
SaveExploits0References1Affected Software14
Microsoft CVE
Microsoft CVE
•added 2026/01/13 4:00 p.m.•16 views

Windows NDIS Information Disclosure Vulnerability

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack...

4.3CVSS5.7AI score0.00486EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/01/13 4:00 p.m.•14 views

Windows Spoofing Vulnerability

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack...

4.6CVSS5.7AI score0.0075EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•19 views

PT-2026-2684

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A security issue exists in Windows Shell that allows an unauthorized attacker to perform spoofing. This requires physical access to the system. The issue involves an absolute path...

4.6CVSS5.6AI score0.0075EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•14 views

PT-2026-2738

CVE-2026-20936 Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack. https://t.co/LV3E4qMazm...

4.3CVSS5.7AI score0.00486EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•3 views

CVE-2026-20936: Out-of-bounds Read

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack...

4.3CVSS5.7AI score0.00486EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•3 views

CVE-2026-20834: Absolute Path Traversal

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack...

4.6CVSS5.7AI score0.0075EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•32 views

PT-2026-2678

Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description An out-of-bounds read issue exists in Windows Internet Connection Sharing ICS. This flaw could allow an attacker to disclose information. Physical access is...

4.6CVSS5.5AI score0.00653EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•3 views

CVE-2026-20828: Out-of-bounds Read

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS5.7AI score0.00653EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 10:53 a.m.•15 views

CVE-2022-33720

Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortcut...

2.4CVSS6.7AI score0.00141EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:34 a.m.•34 views

CVE-2024-41643

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...

6.8CVSS6.6AI score0.00301EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:06 a.m.•27 views

CVE-2024-34639

Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation...

4.6CVSS6.6AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/09 7:16 a.m.•15 views

CVE-2026-20974

Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock...

5.2CVSS0.00188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•2 views

CVE-2026-20974: Undefined Security Weakness

Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock...

5.2CVSS5.8AI score0.00188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•4 views

CVE-2025-14302: Protection Mechanism Failure

Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security feature...

7CVSS5.9AI score0.00346EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/03 5:01 p.m.•10 views

CVE-2025-59703

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from t...

9.1CVSS6.8AI score0.00462EPSS
SaveExploits1References1
CVE
CVE
•added 2025/12/02 12:00 a.m.•31 views

CVE-2025-59701

The Entrust nShield Connect XC , nShield 5c , and nShield HSMi products (versions through 13.6.11 or 13.7 ) are vulnerable to a flaw that allows a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents . The root cause is that these contents are unenc...

4.1CVSS5.9AI score0.00193EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•3 views

CVE-2025-58476: Out-of-bounds Read

Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory...

4.6CVSS5.8AI score0.00147EPSS
SaveExploits0References3
Rows per page
Query Builder