Lucene search
+L

489 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/14 4:57 p.m.3 views

CVE-2026-32223

Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack...

6.8CVSS6AI score0.00522EPSS
SaveExploits0References2Affected Software5
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.12 views

Windows Boot Manager Security Feature Bypass Vulnerability

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack...

4.6CVSS6.2AI score0.00395EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.7 views

Windows Biometric Service Security Feature Bypass Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack...

6.1CVSS6.4AI score0.00193EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.8 views

PT-2026-32866

Name of the Vulnerable Software and Affected Versions Windows USB Print Driver versions prior to April 2026 Description A heap-based buffer overflow in the Windows USB Printing Stack usbprint.sys allows an unauthorized attacker to elevate privileges. This issue can be exploited through a physical...

7.2CVSS5.2AI score0.00522EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.4 views

PT-2026-32718

CVE-2026-20928 Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security featur… https://t.co/pg5NOejQRf...

4.6CVSS6.2AI score0.0043EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.7 views

PT-2026-32752

Name of the Vulnerable Software and Affected Versions Windows Boot Manager affected versions not specified Description Use of an uninitialized resource allows an unauthorized attacker to bypass a security feature through a physical attack. Recommendations At the moment, there is no information...

4.6CVSS6.2AI score0.00395EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/03/26 3:8 p.m.9 views

CVE-2026-24288

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

6.8CVSS6.2AI score0.0043EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/10 6:31 p.m.6 views

EUVD-2026-10608

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

6.8CVSS6.2AI score0.0043EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/10 6:18 p.m.8 views

CVE-2026-24288

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

6.8CVSS6.2AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.7 views

PT-2026-24282

Interested in USB Airgap? Soon a detail description of CVE-2026-24288. This vulnerability in the Windows Mobile Broadband driver could allow an attacker to execute code. Ability to send unsolicited events from the USB device to the host is the entry point. Stay tuned! 😉...

7.2CVSS5.9AI score0.0043EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/02/05 4:58 p.m.8 views

EUVD-2026-5533

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...

7CVSS5.3AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/05 12:0 a.m.11 views

Moxa Industrial Linux 安全漏洞

Moxa Industrial Linux is an industrial-grade Linux system developed by Moxa Corporation in Taiwan, China. Moxa Industrial Linux has a security vulnerability, which stems from the physical attack vulnerability present in LUKS full-disk encryption supported by TPM. This vulnerability could lead to...

7CVSS5.8AI score0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/05 12:0 a.m.12 views

PT-2026-6598

Name of the Vulnerable Software and Affected Versions Moxa Industrial Linux 3 affected versions not specified Description A physical attack is possible on certain Moxa industrial computers utilizing TPM-backed LUKS full-disk encryption. The discrete TPM is connected to the CPU via an SPI bus...

7.2CVSS5.1AI score0.00115EPSS
SaveExploits0References24
RedhatCVE
RedhatCVE
added 2026/01/27 3:19 a.m.17 views

CVE-2026-1410

A vulnerability was detected in Beetel 777VR1 up to 01.00.09/01.00.0955. Impacted is an unknown function of the component UART Interface. The manipulation results in missing authentication. An attack on the physical device is feasible. This attack is characterized by high complexity. The...

6.4CVSS6.2AI score0.00293EPSS
SaveExploits1References1
OSV
OSV
added 2026/01/26 1:15 a.m.4 views

CVE-2026-1410

A vulnerability was detected in Beetel 777VR1 up to 01.00.09/01.00.0955. Impacted is an unknown function of the component UART Interface. The manipulation results in missing authentication. An attack on the physical device is feasible. This attack is characterized by high complexity. The...

6.4CVSS5.1AI score0.00293EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/26 12:2 a.m.19 views

CVE-2026-1410

CVE-2026-1410 affects Beetel 777VR1 (firmware up to 01.00.09/01.00.09_55). The vulnerability is in an unknown function of the UART Interface, leading to missing authentication. Reports describe a physical-device attack feasible with high complexity and no required privileges or user interaction. ...

6.4CVSS5.7AI score0.00293EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/26 12:2 a.m.6 views

CVE-2026-1410

A vulnerability was detected in Beetel 777VR1 up to 01.00.09/01.00.0955. Impacted is an unknown function of the component UART Interface. The manipulation results in missing authentication. An attack on the physical device is feasible. This attack is characterized by high complexity. The...

6.4CVSS5.4AI score0.00293EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/01/26 12:2 a.m.46 views

CVE-2026-1410 Beetel 777VR1 UART missing authentication

A vulnerability was detected in Beetel 777VR1 up to 01.00.09/01.00.0955. Impacted is an unknown function of the component UART Interface. The manipulation results in missing authentication. An attack on the physical device is feasible. This attack is characterized by high complexity. The...

6.4CVSS0.00293EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/01/26 12:2 a.m.9 views

EUVD-2026-4684

A vulnerability was detected in Beetel 777VR1 up to 01.00.09/01.00.0955. Impacted is an unknown function of the component UART Interface. The manipulation results in missing authentication. An attack on the physical device is feasible. This attack is characterized by high complexity. The...

6.4CVSS5.4AI score0.00293EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/01/26 12:2 a.m.7 views

CVE-2026-1410 Beetel 777VR1 UART missing authentication

A vulnerability was detected in Beetel 777VR1 up to 01.00.09/01.00.0955. Impacted is an unknown function of the component UART Interface. The manipulation results in missing authentication. An attack on the physical device is feasible. This attack is characterized by high complexity. The...

6.4CVSS5.4AI score0.00293EPSS
SaveExploits1References4
Rows per page
Query Builder