amlsec

Automated Security Risk Identification in Cyber-Physical Production Systems Using AutomationML-Based Engineering Data This prototype implements the methods presented in the following two publications: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using...

CVE-2026-45585

🔑 CVE-2026-45585 - YellowKey 🔓 Advanced mitigation for CVE-2026-45585 YellowKey 📌 What is YellowKey Vulnerability? YellowKey CVE-2026-45585 is a zero-day physical attack vulnerability discovered in May 2026 that allows attackers with physical access to completely bypass BitLocker encryption on...

CVE-2026-96863

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-88226

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-83895

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-83788

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-83776

Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-83573

Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-83500

Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2026-70116

Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2026-69958

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69947

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69635

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack...

CVE-2026-105006

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-103578

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-102206

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-102188

Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-103578

A vulnerability in the Windows Kernel involves an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation via a physical attack . No specific component or file is identified, and no exploit details or specific remediation versions are prov...

CVE-2026-105006

A use after free vulnerability exists in the HID class driver . This flaw allows an unauthorized attacker to perform a physical attack to achieve privilege elevation . The vulnerability is associated with CWE-416 . No specific affected versions or exploit links are provided in the documentation; ...

CVE-2026-102206

A heap-based buffer overflow exists in the Windows Portable Device MTP Driver . This vulnerability allows an unauthorized attacker to achieve privilege escalation via a physical attack . The CVSS 3.1 score is 6.8 (Medium) , with a physical attack vector and no user interaction required. No specif...