62930 matches found
PT-2026-56683
Name of the Vulnerable Software and Affected Versions UEFI Firmware Parser versions prior to 1.14 Description An issue exists when parsing BIOS, Intel ME, and UEFI firmware structures. The MakeTable function in uefi firmware/compression/Tiano/Decompress.c fails to validate that bit-length values...
ios-26-activation-research
iOS 26 Activation Lock -- Documented Vulnerabilities Document...
Multi-Vendor BIOS Security Vulnerabilities (April 2026) - Lenovo Support US
No description provided...
ps459
Multi-Firmware PS4 WebKit & Kernel Exploit Chain An exploit c...
Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow
Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices WSD scan requests are improperly validated and handled by the MFP. As a temporary mitigation measure for the buffer overflow vulnerability,...
The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.
The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending a specially crafted GET request to the /urlmember.asp endpoint...
CVE-2026-31170
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi...
CVE-2026-6124
A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing a manipulation of the argument page/menufacturer can lead to stack-based buffer overflow. The attack can be executed...
CVE-2026-5988
A vulnerability was detected in Tenda F451 1.0.0.7. This impacts the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Performing a manipulation of the argument mitssid results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be...
CVE-2026-32220 UEFI Secure Boot Security Feature Bypass Vulnerability
...
CVE-2026-32220 UEFI Secure Boot Security Feature Bypass Vulnerability
...
CVE-2026-32220
CVE-2026-32220 : Improper access control in the Windows Virtualization-Based Security (VBS) Enclave allows an authorized local attacker to bypass a security feature. Affected component: Windows VBS Enclave within the Hyper-V/OS security stack. Documented impact includes local bypass of protection...
CVE-2026-0390 UEFI Secure Boot Security Feature Bypass Vulnerability
...
PoC
Fabricked: Breaking AMD SEV-SNP via Infinity Fabric !CVE-20...
CVE-2026-5959
A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Factory Reset Handler. Performing a manipulation results in improper authentication. The attack can be initiated remotely. The...
EUVD-2026-22091
A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code execution RCE. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Por...
HPESBHF05036 rev.1 - Certain HPE ProLiant AMD DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-3016: IOMMU Write Buffer Vulnerability, Loss of Confidential Guest Integrity Vulnerability
Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to 1.7008-07-2025 HPE ProLiant DL325 Gen11 Server - Prior to 2.7008-07-2025 HPE ProLiant DL345 Gen11 Server - Prior to 2.7008-07-2025 HPE ProLiant DL3...
HPESBHF05034 rev.1 - Certain HPE ProLiant AMD DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7054: Incorrect use of LocateProtocol Service of the EFI_BOOT_Services table in SMI Handler, Local Arbitrary Code Execution Vulnerability
Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL325 Gen12 - Prior to 1.4001-09-2026 HPE ProLiant Compute DL345 Gen12 - Prior to 1.4001-09-2026 HPE ProLiant DL145 Gen11 - Prior to 1.8002-06-2026 HPE...
SEV-SNP Routing Misconfiguration
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2025-54510| A missing lock verification in AMD Secure Processor ASP firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based...
