CVE-2015-2291

CVE-2015-2291 1 版本低于 1.3.1.0 的 IQVW32.sys 和 2 版本低于 1.3.1.0 的 IQVW64.sys（位于 Windows 版 Intel 以太网诊断驱动程序中）允许本地用户通过特制的 a 0x80862013、b 0x8086200B、c 0x8086200F 或 d 0x80862007 IOCTL 调用导致拒绝服务，或可能以内核权限执行任意代码。 概述 本仓库包含针对该漏洞的分析文章，以及可在 64 位 Windows 7 SP1 和 Windows 10 20H2 上运行的概念验证（PoC）漏洞利用代码。驱动程序文件位于 Driver...

Astra Linux – Vulnerability in Linux-Firmware

A null pointer reference exists in some IntelR Graphics Drivers for Windows prior to version 26.20.100.7212, as well as prior to the release of the Linux kernel version 5.5. This vulnerability could allow a privileged user to exploit the system to cause a denial of service through local access...

Astra Linux – Vulnerability in exempi

The XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability that occurs during the application’s memory allocation process. This may cause the memory management functions to become mismatched, resulting in local application denial of service in the...

Astra Linux – Vulnerability in Mariadb 10.3

MariaDB Server before version 10.7 is vulnerable to Denial of Service attacks. In the file extra/mariabackup/dsxbstream.cc, when an error occurs e.g., streamctxt-destfile == NULL while executing the xbstreamopen method, the held lock is not released properly. This allows local users to trigger a...

Astra Linux – Vulnerability in gpac

A vulnerability in GPAC version 2.2.1 and earlier allows a local attacker to cause a denial of service through the QDecCoordOnUnitSphere function in the file src/bifs/unquantize.c...

CVE-2026-90994: Out-of-bounds Read

A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This...

CVE-2026-28617

A vulnerability exists in the WifiNetworkSuggestionsManager.java component, leading to a possible persistent Denial of Service (DoS) due to resource exhaustion . This flaw allows for a local DoS attack without requiring additional execution privileges or user interaction. The vulnerability affect...

CVE-2026-28584

In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28596: Uncontrolled Resource Consumption

In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28584: Protection Mechanism Failure

In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20500: Improper Certificate Validation

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

CVE-2026-75038: UNIX Symbolic Link (Symlink) Following

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwrwpcreate during the connect process. frwrwpcreate creates a singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. In case of failure, it returns a negative...

CVE-2026-59566: Improper Handling of Values

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

EUVD-2026-63696

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

EUVD-2026-63728

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-55015

CVE-2026-55015 is an uncontrolled search path element vulnerability in Windows Remote Help that allows an authorized local attacker to cause a denial of service . The attack requires local access with low privileges and no user interaction (CVSS 3.1: 5.5 MEDIUM ). CISA's SSVC assessment indicates...

PT-2026-79190

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

EUVD-2026-57828

A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manager's inter-process communication IPC message parsing. By sending a specially crafted message, the attacker can cause out-of-bounds memory access,...

EUVD-2026-57066

The Intel ALH digital-audio-interface driver function daialhgetproperties in drivers/dai/intel/alh/alh.c used a caller-supplied int streamid with no range validation. The value indexes the fixed-size static const uint8t alhhandshakemap64 array and scales a FIFO register address, so an out-of-rang...