CVE-2025-20693

In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-34...

The vulnerability of the Windows operating system’s tcpip.sys driver allows attackers to increase their privileges.

The vulnerability of the Windows TCP/IP.sys driver is related to the assignment of the null pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Vulnerability of the drm_mode_page_flip_ioctls function in the drivers/gpu/drm/drm_plane.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in the Linux operating system, which allows a hacker to trigger a service failure.

Vulnerability of the drmmodepageflipioctls function in the drivers/gpu/drm/drmplane.c module – The Linux kernel’s Direct Rendering Infrastructure DRI driver has vulnerabilities related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

CVE-2025-49661 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-20687

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481...

CVE-2025-20691

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Issue ID: MSV-3477...

CVE-2025-20681

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446...

CVE-2025-20687

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481...

CVE-2025-20687

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481...

CVE-2025-20687

CVE-2025-20687 affects the Bluetooth driver (MediaTek chipset family in various advisories). The vulnerability is an out-of-bounds read caused by an incorrect bounds check, enabling local denial of service with the attacker gaining user privileges; exploitation does not require user interaction. ...

CVE-2025-20680

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Issue ID: MSV-3482...

CVE-2025-20680

CVE-2025-20680 affects the Bluetooth driver, with an out-of-bounds write caused by an incorrect bounds check. The vulnerability can lead to local escalation of privilege with User execution privileges required and no user interaction needed. Patch ID: WCNCR00418044; Issue ID: MSV-3482. Vulnerabil...

PT-2025-28307 · Unknown · Bluetooth Driver

Name of the Vulnerable Software and Affected Versions: Bluetooth driver affected versions not specified Description: The issue is related to a possible out of bounds write in the Bluetooth driver due to an incorrect bounds check. This could lead to a local escalation of privilege, requiring user...

PT-2025-28314 · Unknown · Bluetooth Driver

Name of the Vulnerable Software and Affected Versions: Bluetooth driver affected versions not specified Description: The issue is related to a possible out of bounds read in the Bluetooth driver due to an incorrect bounds check. This could lead to a local denial of service, requiring user executi...

PT-2025-27999

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0 Description: A vulnerability in the Linux kernel has been resolved, related to the kvaser pciefd driver. The issue involves the echo skb max handling logic, which defines the supported upper limit of echo...

The vulnerability in the driver/net/ethernet/marvell/octeontx2/nic/otx2_dmac_flt.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the driver/net/ethernet/marvell/octeontx2/nic/otx2dmacflt.c component of the Linux operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the drivers/regulator/rtq2208-regulator.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/regulator/rtq2208-regulator.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

NeacSafe64 安全漏洞

NetEase NeacSafe64 is a driver from the Chinese company NetEase. A security vulnerability exists in NeacSafe64 versions prior to 1.0.0.8, which stems from improper handling of IOCTL commands and may result in elevated privileges...

Vulnerability of the vxlan_exit_batch_net() function in the drivers/net/vxlan.c module – A driver for supporting network adapter devices in the Linux operating system, which allows an attacker to compromise the integrity and accessibility of protected information.

Vulnerability of the vxlanexitbatchnet function in the drivers/net/vxlan.c module – The Linux kernel’s network adapter support driver has a vulnerability that leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to compromise the integrity and...

Vulnerability of the dpu_encoder_phys_init() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c module – This driver for supporting the Direct Rendering Infrastructure (DRI) of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the dpuencoderphysinit function in the drivers/gpu/drm/msm/disp/dpu1/dpuencoder.c module – The driver for supporting Direct Rendering Infrastructure DRI in Linux kernel is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow...