CVE-2026-47509

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an out-of-bounds write writing data past intended memory buffer limits within the kernel mode layer. A successful exploit could allow the attacker to achieve arbitrary code execution, escalate...

CVE-2026-47595

A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer fails to properly preserve memory permissions, allowing an unprivileged local user to write data to read-only memory. A local attacker could exploit this vulnerability to execute arbitrary code, escalate privileges,...

CVE-2026-47596

A flaw was found in the NVIDIA GPU Display Driver for Linux. In the kernel mode layer, memory permissions are not properly preserved, allowing an unprivileged local user to write to read-only memory. This issue can lead to arbitrary code execution and privilege escalation on the affected system...

CVE-2026-47548

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an out-of-bounds write vulnerability within the kernel mode layer to corrupt system memory. Successful exploitation could allow an attacker to achieve arbitrary code execution with elevated kernel privileges, trigger a...

CVE-2026-47530

A flaw was found in nvidia-driver. A local user with standard privileges can trigger an out-of-bounds memory write within the driver's kernel-mode layer. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, tamper with sensitive data, or cause a denial o...

CVE-2026-47496

A flaw was found in the NVIDIA Virtual GPU vGPU Manager within the NVIDIA GPU Display Driver. A user within a guest virtual machine VM can exploit this vulnerability by sending a specially crafted Remote Procedure Call RPC request to the host system, causing an out-of-bounds memory write. A...

CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

CVE-2026-103475

Versions of yii2-starter-kit through 4.2.0 are vulnerable because the default development configuration sets allowedIPs to ['*'], exposing the Yii debug and Gii modules to all IP addresses. Unauthenticated remote attackers can exploit this to access the debug endpoint to read sensitive data, such...

CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

EUVD-2026-90206

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Удалённое выполнение кода через кодек изображений Samsung ⚙️ Что это такое Критическая уязвимость в библиотеке обработки изображений Samsung libimagecodec.quram.so — используемой на устройствах Galaxy под управлением Android. 🧩 Это внеграничная запись out-of-bounds write ,...

CVE-2026-47582

A flaw was found in the NVIDIA GPU Display Driver for Windows kernel module. A local attacker with basic user privileges can trigger an out-of-bounds write vulnerability in the driver. A successful exploit could allow the attacker to achieve arbitrary code execution, escalate privileges, tamper...

CVE-2026-47537

A flaw was found in the NVIDIA GPU display driver. An out-of-bounds write vulnerability in the kernel mode layer allows a local privileged attacker to corrupt system memory. Successful exploitation can lead to arbitrary code execution, privilege escalation, or a Denial of Service DoS, as well as...

CVE-2026-47523

A flaw was found in the NVIDIA GPU display driver. A local user with low privileges can trigger an out-of-bounds write memory error in the kernel mode layer. Successful exploitation could lead to privilege escalation and arbitrary code execution with kernel permissions, cause a Denial of Service...

CVE-2026-47529

A flaw was found in the NVIDIA GPU display driver. A local attacker with administrative privileges can trigger an out-of-bounds write in the driver's kernel mode layer. Successful exploitation could lead to arbitrary code execution, privilege escalation, data tampering, information disclosure, or...

CVE-2026-47556

A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger an integer overflow in the driver's kernel mode layer, leading to an out-of-bounds memory write. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial ...

CVE-2026-47561

A flaw was found in the NVIDIA GPU display driver. A local, unprivileged user can exploit this vulnerability by submitting an input/output control ioctl request with an unvalidated buffer size to the driver's kernel layer. This causes an out-of-bounds write in kernel memory, which may allow the...

CVE-2026-93144

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The checkptrtobtfaccess function, which is responsible for validating memory access through BPF Type Format BTF pointers, incorrectly allowed certain program-type callbacks to bypass the intended read-only policy for...

CVE-2026-93112

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. The bpfcpumaskpopulate function incorrectly allows writing to a read-only memory region by accepting borrowed cpumask pointers as writable destinations. This could allow a local attacker to cause a denial of service or...