13217 matches found
CVE-2026-16006
CVE-2026-16006 is an exposure of sensitive system information vulnerability in the ASUS Armoury Crate driver . A local user with low privileges can send a crafted IOCTL request that bypasses the driver's verification mechanism, allowing them to obtain kernel virtual addresses and gain insight int...
CVE-2026-76967
creationtimestamp| type| source ---|---|--- 2026-09-08 02:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxwh5e3xh2b...
CVE-2026-58240
creationtimestamp| type| source ---|---|--- 2026-09-08 00:48:53+00:00| seen| https://bsky.app/profile/suriq.io/post/3muxsgolk5j2r 2026-09-08 02:07:22+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muxwszdd352g 2026-09-08 04:02:24+00:00| seen|...
CVE-2026-86538
creationtimestamp| type| source ---|---|--- 2026-09-08 00:04:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpxaxrxg2b 2026-09-18 17:00:28+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/58eb925f-807c-4a80-aebc-629f77cefdae...
CVE-2026-86542
creationtimestamp| type| source ---|---|--- 2026-09-08 00:03:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpux7hsz22 2026-09-08 10:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muyrs6o7z42n...
PT-2026-88553
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in BackgroundFetch allows a remote attacker who has compromised the renderer process to leak sensitive information through a crafted HTML page. A confused deputy...
PT-2026-88705
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Contacts component allows a remote attacker to potentially obtain sensitive information. This requires the attacker to have already compromised the renderer...
PT-2026-87279
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...
PT-2026-88690
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the Passwords component allows a remote attacker to potentially leak sensitive information through the use of crafted network traffic. Recommendations Updat...
VulnCheck KEV: CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3270)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302 netfilter: ctnetlin...
PT-2026-88003
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-88504
Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...
PT-2026-87917
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally...
PT-2026-87441
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue in the Windows Kernel allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is...
PT-2026-87749
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...
PT-2026-88218
Name of the Vulnerable Software and Affected Versions MediaProvider affected versions not specified Description A permissions bypass in the getQueryBuilderInternal function within MediaProvider.java allows for the retrieval of location metadata. This issue enables local information disclosure...
PT-2026-88527
Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description An out-of-bounds write issue exists where an application may be able to gain root privileges. This occurs when data is...
PT-2026-89113
Name of the Vulnerable Software and Affected Versions libheif versions 1.19.0 through 1.23.1 Description Crafted HEIF or AVIF mime metadata and unci image data can cause the decompress brotli and do inflate functions to grow accumulated output without an effective size limit or MemoryHandle...