3641 matches found
CVE-2026-40003
CVE-2026-40003 describes a USB-based arbitrary memory write vulnerability in the ZTE ZX297520V3 BootROM. The issue arises from lack of target address validation in the USB download mode, allowing writes to arbitrary locations in BootROM runtime memory. Potential consequences, as stated, include o...
CVE-2026-40003 USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow,...
PT-2026-38322
Name of the Vulnerable Software and Affected Versions ZTE ZX297520V3 affected versions not specified Description The BootROM contains an issue allowing arbitrary memory writes via USB. Due to a lack of target address validation in the USB download mode, it is possible to write data to any locatio...
Exploit for CVE-2025-0690
CVE-2025-0690: Vulnerabilidad de Desbordamiento de Enteros en...
Exploit for Acceptance of Extraneous Untrusted Data With Trusted Data in Microsoft
BitUnlocker Downgrade Attack A proof of concept for accessing...
April 30, 2026—KB5083631 (OS Builds 26200.8328 and 26100.8328) Preview
None None...
Linux kernel double free in Xen privcmd driver
ISSUE DESCRIPTION The Linux kernel's privcmd driver can be abused to circumvent kernel lockdown secure boot by causing a double free of kernel memory. Note that this operation can be performed by root only, so any further impact on the system like denial of service is not security relevant. IMPAC...
OESA-2026-2079 shim security update
Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is...
April 19, 2026—KB5091572 (OS Build 14393.9062) Out-of-band
None None...
April 19, 2026—KB5091575 (OS Build 20348.5024) Out-of-band
None None...
April 19, 2026—KB5091573 (OS Build 17763.8647) Out-of-band
None None...
Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities
Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 vulnerabilities, 157 are rated Important, eight are rated Critical, three are rated Moderate, and one i...
CVE-2026-32220
CVE-2026-32220 : Improper access control in the Windows Virtualization-Based Security (VBS) Enclave allows an authorized local attacker to bypass a security feature. Affected component: Windows VBS Enclave within the Hyper-V/OS security stack. Documented impact includes local bypass of protection...
CVE-2026-32220 UEFI Secure Boot Security Feature Bypass Vulnerability
...
CVE-2026-32220 UEFI Secure Boot Security Feature Bypass Vulnerability
...
CVE-2026-0390
Technical details about CVE-2026-0390 are not publicly provided in the available documents. No information on affected product versions, root cause, exploitability, or remediation is included. Monitor for updates from official sources.
CVE-2026-0390 UEFI Secure Boot Security Feature Bypass Vulnerability
...
CVE-2026-0390 UEFI Secure Boot Security Feature Bypass Vulnerability
...