CVE-2025-55339

CVE-2025-55339 : Windows Network Driver Interface Specification (NDIS) driver contains an out-of-bounds read that enables an authorized, local attacker to achieve elevated privileges. The Initial and Connected documents confirm the vulnerability description but do not provide concrete remediation...

Microsoft Windows Network Driver Interface Specification Buffer Error Vulnerability

The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation USA. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification, which can be exploited by an attacker t...

PT-2025-41340

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A memory corruption issue exists when processing camera platform driver IOCTL calls. This can potentially lead to system instability or compromise. Recommendations At the momen...

EUVD-2015-6041

Malware in sbrugna...

EUVD-2020-2198

Malware in sbrugna...

EUVD-2023-26188

Malicious code in bioql PyPI...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which stems from a DDI call that could lead to memory corruption when handling invalid buffers...

Windows TDI Privilege Escalation

The vulnerability of the Transport Driver Interface TDI driver in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Microsoft Windows TDI Disclosure

The vulnerability of the Transport Driver Interface TDI driver in Microsoft operating systems and Windows is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protecte...

CVE-2025-49659 Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

...

CVE-2025-49658 Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability

...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Added locks for usbdriverclaiminterface The documentation for usbdriverclaiminterface states that “the device lock” is required when this function is called from locations other than probe. This seems ...

CVE-2023-22023

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device Driver Interface. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2020-0705

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification NDIS improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification NDIS...

CVE-2024-10083: Improper Input Validation

CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation when specific driver interface is invoked locally by an authenticated user with crafted input...

Important: kernel-livepatch-6.1.115-126.197

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfochangednotify CVE-2024-36899 In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount CVE-2024-49960 In the...

HDAudBus_DMA Driver Code Execution

The vulnerability of the HDAudBusDMA driver interface of the Microsoft High Definition Audio Bus driver is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

PT-2024-17699 · Iobit · Iobit Advanced Systemcare Ultimate +1

Name of the Vulnerable Software and Affected Versions: IObit Advanced SystemCare Ultimate versions up to 17.0.0 Description: A problematic issue has been found, affecting the function 0x8001E004 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null...

driver core: bus: Fix double free in driver API bus_register()

...

UBUNTU-CVE-2024-50055

In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API busregister For busregister, any error which happens after ksetregister will cause that @priv are freed twice, fixed by setting @priv with NULL after the first free...