CVE-2026-68443 hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

PT-2026-71036

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The PROFINET service is affected by a buffer overflow, which occurs when a program writes more data to a block of memory than it can hold. This issue exists in t...

PT-2026-71367

Name of the Vulnerable Software and Affected Versions UpSnap versions prior to 5.4.0 Description An OS command injection flaw exists in the device management functionality. This occurs due to unsafe shell command template interpolation using the ip and mac fields. An authenticated low-privileged...

CVE-2026-64934

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:19+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...

CVE-2026-68067

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:15+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 23:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstryrwkxz2g 2026-08-12 00:01:35+00:00| seen|...

CVE-2026-67568

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:13+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:18:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2oepdilmaqi7n 2026-08-11 23:50:03+00:00| seen|...

CVE-2026-66098

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:08+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...

CVE-2026-18844

creationtimestamp| type| source ---|---|--- 2026-08-11 20:14:43+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mstgjkadjw26 2026-08-11 20:15:22+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02...

CVE-2026-18844

The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy BLE interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when ...

CVE-2026-18844

The CVE-2026-18844 entry concerns the Pulsetto Vagus Nerve Stimulator firmware, where several undisclosed commands are accepted over BLE without authentication or encryption and are fully processed when powered on. The connected sources offer no details on affected software versions, specific com...

CVE-2026-68207

A flaw was found in the Linux kernel's media Video Processing Engine VPE driver. This issue occurs during device initialization when a specific resource is unavailable, causing the device to remain improperly registered. As a result, system resources are not correctly released, which could lead t...

CVE-2026-68180

A flaw was found in the intelth Intel Trace Hub driver within the Linux kernel. This vulnerability occurs because the intelthoutputopen function acquires a device reference that is not properly released by the intelthmscrelease function when handling Message Signaled Interrupt MSC outputs...

CVE-2026-68221

A flaw was found in the Linux kernel's Nuvoton NPCM video driver. The npcmvideoprobe function allocates memory that is not properly freed on error paths or during device removal, leading to memory leaks. Additionally, when npcmvideosetupvideo fails, associated reserved memory is not released. The...

CVE-2026-68152

A flaw was found in the Linux kernel's AMT Accelerated Mobile Page device driver. A use-after-free vulnerability can occur due to a race condition during device removal. This allows delayed work items to access a freed memory structure, potentially leading to kernel crashes or memory corruption. ...

CVE-2026-68318

A flaw was found in the pdscore component of the Linux kernel. This use-after-free vulnerability occurs because the workqueue is destroyed prematurely during the pdscremove operation, before pdscteardown completes. This timing issue allows for work to be queued on an already destroyed workqueue,...

CVE-2026-68392

A flaw was found in the Linux kernel's Bluetooth management subsystem. This vulnerability occurs due to incorrect locking when handling memory pointers during device unpairing and disconnection. An attacker could exploit this to trigger a Use-After-Free UAF condition, which is a type of memory...

CVE-2026-66804

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62747

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62710

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-20789

Improper access control for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...