EUVD-2026-56483

Improper access control for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20739

CVE-2026-20739 describes an issue in some Intel(R) PROSet/Wireless WiFi Software for Windows, where an improper conditions check in Ring 2: Device Drivers could allow a denial of service. The attack is network-adjacent, unauthenticated, low complexity, with no user interaction required, and may i...

EUVD-2026-56482

Improper conditions check for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

EUVD-2026-56481

Exposure of sensitive information to an unauthorized actor for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable...

CVE-2026-20737

Exposure of sensitive information to an unauthorized actor for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable...

CVE-2026-11733

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device...

CVE-2026-68132

A flaw was found in the Linux kernel. A deadlock can occur during the emergency thaw process of frozen block devices. This issue arises when the dothawallcallback function attempts to reacquire a lock it already holds exclusively, while also holding another mutex. This deadlock prevents further...

CVE-2026-11739 Command injection vulnerability in some NETGEAR Nighthawk devices

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic attacker in the middle to compromise the confidentiality and integrity of the affected device...

CVE-2026-11734

CVE-2026-11734: A buffer overflow in NETGEAR Nighthawk models (MR90, RAX42, MS70, RAX50, RAX43, RAX43v2, RAX41v2, RAX49s, RAX41, RAX42v2, MR70, MS90, RAX50v2) allows an authenticated admin to temporarily disrupt device availability. The current documents only specify the vulnerability and affecte...

CVE-2026-11734 Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable...

EUVD-2026-56190

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device...

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68227

A flaw was found in the cx231xx media driver within the Linux kernel. This vulnerability arises from incorrect management of device-managed resources, where their lifetime is tied to the parent Universal Serial Bus USB device instead of the USB interface. This can lead to memory leaks when driver...

EUVD-2026-56121

A vulnerability has been identified in Desigo DXR2 All versions V01.21.233.16-7862, Desigo PXC3 All versions V01.21.233.16-7862, Desigo PXC4 All versions V02.21.194.36-2715, Desigo PXC5.E003 All versions V02.21.194.36-2715, Desigo PXC5.E24 All versions V02.21.194.36-2715, Desigo PXC7 All versions...

A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices

A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules built into electric-vehicle chargers, industrial routers, and car telematics units, that is enough to take the whole device over. Researchers at the University of Birmingham an...

CVE-2026-68084

A flaw was found in the Linux kernel's tsi148 bridge component. This vulnerability occurs due to a resource leak where the location monitor resources are not properly freed during device unbind or module unload operations. An attacker could potentially exploit this flaw to exhaust system resource...