CVE-2026-69421: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83939: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

PT-2026-88105

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69501: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

PT-2026-87523

Name of the Vulnerable Software and Affected Versions Windows Secure Kernel Mode affected versions not specified Description An untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. A pointer dereference occurs when a program...

PT-2026-87779

Name of the Vulnerable Software and Affected Versions Windows Secure Kernel Mode affected versions not specified Description A heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

CVE-2026-69846: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2023-20511: Release of Invalid Pointer or Reference

Release of an invalid pointer in the AMD kernel mode driver KMD could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution...

The vulnerability of the Secure Kernel Mode mode in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to improper checking of consistency in input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

EUVD-2026-65597

The virtio PCI driver drivers/virtio/virtiopci.c parses a device's PCI capability list during driver initialization. In virtiopcireadcap the device-supplied capability length byte caplen read from PCI config space via pcieconfread was only checked with asserttmp.caplen == capstructsize. That asse...

CVE-2026-13216 Out-of-bounds stack write in Zephyr virtio PCI driver from unvalidated device-supplied capability length

The virtio PCI driver drivers/virtio/virtiopci.c parses a device's PCI capability list during driver initialization. In virtiopcireadcap the device-supplied capability length byte caplen read from PCI config space via pcieconfread was only checked with asserttmp.caplen == capstructsize. That asse...

CVE-2026-13216

CVE-2026-13216 is an out-of-bounds stack write in the Zephyr RTOS virtio PCI driver (drivers/virtio/virtio_pci.c). The device-supplied cap_len field, read from PCI config space, was validated only by a compiled-out assert() (gated by CONFIG_ASSERT, off by default in production). The unvalidated l...

CVE-2026-13216 Out-of-bounds stack write in Zephyr virtio PCI driver from unvalidated device-supplied capability length

The virtio PCI driver drivers/virtio/virtiopci.c parses a device's PCI capability list during driver initialization. In virtiopcireadcap the device-supplied capability length byte caplen read from PCI config space via pcieconfread was only checked with asserttmp.caplen == capstructsize. That asse...

CVE-2026-13216 Out-of-bounds stack write in Zephyr virtio PCI driver from unvalidated device-supplied capability length

The virtio PCI driver drivers/virtio/virtiopci.c parses a device's PCI capability list during driver initialization. In virtiopcireadcap the device-supplied capability length byte caplen read from PCI config space via pcieconfread was only checked with asserttmp.caplen == capstructsize. That asse...

CVE-2026-13215 Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem image

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...

PT-2026-81172

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The ext2 filesystem driver fails to validate the s log block size field of the on-disk superblock during the filesystem mounting process. The function ext2 verify disk superblock in...

CVE-2026-40144

A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...

CVE-2026-40144

A memory-corruption flaw in the kernel-mode driver of BeyondTrust Endpoint Privilege Management for Windows (versions before 26.1.2) allows insufficiently validated input to trigger out-of-bounds memory access, yielding HIGH confidentiality, integrity, and availability impact. Exploitation requir...

CVE-2026-40144 Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)

A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...

CVE-2026-40144

A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...