EUVD-2026-10628

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

CVE-2026-25165

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

CVE-2026-25165

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

CVE-2026-25165

CVE-2026-25165 is a Windows local privilege escalation affecting Performance Counters. The description notes a local attack with low privileges, no user interaction, and high impact on confidentiality, integrity, and availability. The underlying root cause and affected component details are not p...

CVE-2026-25165 Performance Counters for Windows Elevation of Privilege Vulnerability

...

CVE-2026-25165

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

CVE-2026-25165 Performance Counters for Windows Elevation of Privilege Vulnerability

...

Performance Counters for Windows Elevation of Privilege Vulnerability

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

Linux kernel imon.c DoS

The vulnerability of the imon.c component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

PT-2026-24292

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in Windows Performance Counters related to pointer dereferencing. Successful exploitation could allow an attacker to gain elevated privileges. The issue involves a null pointer...

CVE-2026-25165: NULL Pointer Dereference

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

Unbreakable Enterprise kernel security update

5.4.17-2136.353.3 - xfrm: flush all states in xfrmstatefini Sabrina Dubroca Orabug: 38934000 - xfrm: also call xfrmstatedeletetunnel at destroy time for states that were never added Sabrina Dubroca Orabug: 38934000 - Revert 'xfrm: destroy xfrmstate synchronously on net exit path' Sabrina Dubroca...

Linux Machine Setup Buffer Overflow DoS

The vulnerability of the machinesetup function in the arch/xtensa/platforms/xtfpga/setup.c module of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the calibrateccount function in the arch/xtensa/kernel/time.c module of the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Control Flow Reconstruction using HPCs

Affected Products and Mitigation Performance counters are not protected by Secure Encrypted Virtualization SEV, SEV-ES, or SEV-SNP. AMD has defined support for performance counter virtualization in APM Vol 2, section 15.39. Performance Monitoring Counters PMC virtualization, available on AMD...

CVE-2026-2539

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool e.g., SDR can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication...

CVE-2026-2539 Micca KE700 Cleartext transmission of key fob ID

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool e.g., SDR can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication...

CVE-2026-2539

The CVE-2026-2539 affects the Micca KE700 car alarm system where the RF protocol transmits data frames in cleartext. The vulnerability arises because random numbers and counters used for authentication are captured via radio interception, enabling an attacker to obtain sensitive authentication-re...

Micca KE700 security vulnerability

The Micca KE700 is a source bookshelf speaker from the Micca company. The Micca KE700 has a security vulnerability, which stems from unencrypted data frames in the RF communication protocol. This vulnerability may allow attackers to capture plaintext transmitted random numbers and counters, there...

PT-2026-8234

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool e.g., SDR can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication...