Amazon Linux 2023 : nvidia-xconfig (ALAS2023NVIDIA-2026-299)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-299 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Important: kmod-nvidia-open-dkms

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

Important: nvidia-fabricmanager

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

drivers/mfd/dln2.c Heap Buffer Overflow DoS

The vulnerability of the dln2probe function in the drivers/mfd/dln2.c module of the MFD controller driver for the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS

The vulnerability of the opaphsmmcprobe function in the driver/mmc/host/omaphsmmc.c file of the MMC/SD/SDIO card driver in the Linux operating system is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the mtkvcodecprobe function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecdrv.c driver for multimedia devices in Linux operating systems is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause service...

Linux MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS

The vulnerability of the sdioreleasefunc function in the drivers/mmc/core/sdiobus.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to compromise the...

USB driver Windows Privilege Escalation

The vulnerability of the USB driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

USB Print Driver Privilege Escalation

The vulnerability of the USB Print Driver driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

USBurst

USBurst - DWC3 USB Descriptor Buffer Overflow Apple Secure Ro...

CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-50453 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-50371 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-50396

CVE-2026-50396 is a Windows Kernel-Mode Driver vulnerability described as a use-after-free in kernel-mode drivers that can allow an authenticated attacker to elevate privileges locally. The issue affects Windows kernel components classified under Windows Kernel-Mode Drivers and is mapped to CVSS ...

CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability

...

CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability

...

CVE-2026-50697 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2026-15506

CVE-2026-15506 affects SecureAge CatchPulse (up to 10.9.3). The vulnerable element is an unknown function in the saappctl.sys driver library, where manipulation leads to a heap-based buffer overflow. Exploitation is local, and publicly disclosed exploits exist. The vendor was contacted about this...

EUVD-2026-42340

Horde Virtual File System VFS API before 3.0.1 contains an OS command injection vulnerability in the HordeVfsSmb driver where the escapeShellCommand method fails to sanitize command substitution sequences, allowing authenticated attackers to inject arbitrary shell commands through user-controlled...