5564 matches found
CVE-2026-18413
The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...
CVE-2026-18413
The NXP MCUX LPADC ADC driver is vulnerable to an out-of-bounds write due to a missing buffer size validation in mcux_lpadc_start_read(). The driver fails to verify that the destination buffer is large enough for the requested sampling sequence. In builds with CONFIG_USERSPACE , an unprivileged u...
CVE-2026-18413 Out-of-bounds write in the NXP MCUX LPADC ADC driver due to missing adc_sequence buffer size validation
The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...
CVE-2026-18413 Out-of-bounds write in the NXP MCUX LPADC ADC driver due to missing adc_sequence buffer size validation
The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...
CVE-2025-61155
CVE-2025-61155 — GameDriverX64.sys의 임의 프로세스 종료 Tower of FantasyHotta Studio / Perfect World에 포함되어 배포되는 서명된 커널 모드 안티치트 드라이버 GameDriverX64.sys는 권한이 없는 일반 로컬 사용자 가 PPL로 보호된 안티바이러스/EDR 서비스를 포함한 임의의 프로세스를 종료 할 수 있게 한다. 이는 랜섬웨어 운영자들이 찾는 유형의 프리미티브이며, 실제 환경에서 Interlock 작전에 의해 BYOVD EDR-killer로 적극적으로 악용되고...
CVE-2026-18414: Out-of-bounds Write
The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...
CVE-2026-18413: Out-of-bounds Write
The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...
PINKPANTHER
PINKPANTHER Brief Windows x64 カーネルモードのハンドクラフト（手書き）シェルコード。実行中プロセスのプライマリアクセストークンを SYSTEM プロセストークンに置き換え、Elevation of PrivilegeEoP（特権昇格）を行います。 対応OSバージョン Windows 7/Windows Server 2008 R2 Build 7601 Windows 8/Windows Server 2012 Build 9200 Windows 8.1/Windows Server 2012 R2 Build 9600 Windows 10 1507/T...
CVE-2026-79153
Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...
CVE-2026-97732
IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WINCERTIFICATE data "IRONMACE Co., Ltd." and "DigiCert Trusted Root G4" instead of parsing and validating the PKCS signature data...
CVE-2026-97732
IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WINCERTIFICATE data "IRONMACE Co., Ltd." and "DigiCert Trusted Root G4" instead of parsing and validating the PKCS signature data...
EUVD-2026-86513
IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WINCERTIFICATE data "IRONMACE Co., Ltd." and "DigiCert Trusted Root G4" instead of parsing and validating the PKCS signature data...
CVE-2026-97732
The IRONMACE Ironshield 1.0.0.167 software contains a vulnerability in its tvk.sys kernel-mode driver. The root cause is that the driver authenticates client executables by searching for specific strings ("IRONMACE Co., Ltd." and "DigiCert Trusted Root G4" ) within WIN_CERTIFICATE data instead of...
CVE-2026-97732
IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WINCERTIFICATE data "IRONMACE Co., Ltd." and "DigiCert Trusted Root G4" instead of parsing and validating the PKCS signature data...
EUVD-2026-87080
Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...
CVE-2026-79153
The Seclore FileSecure Desktop Client before version 3.25.1.0 contains an improper access control vulnerability within its kernel-mode driver component. This flaw allows an authenticated local user to achieve privilege escalation to NT AUTHORITY\SYSTEM on affected systems. No specific exploit cod...
CVE-2026-79153: Improper Privilege Management
Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...
CVE-2026-79153
Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...
UBUNTU-CVE-2026-93270
In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...