9404 matches found
EUVD-2026-73099
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-71348
CVE-2026-71348 is a heap-based buffer overflow in Windows Spaceport.sys , a Windows system driver, that allows an unauthorized attacker with physical access to execute code on the target system. The CNA-assigned CVSS 3.1 score is 6.8 (MEDIUM) with vector AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, refle...
EUVD-2026-73098
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-71350
CVE-2026-71350 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an unauthorized attacker to execute code on the target system. The vulnerability requires a physical attack vector (CVSS 3.1: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H , base score 6.8 – MEDIUM ), meaning the...
EUVD-2026-73088
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-71329
CVE-2026-71329 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code via a physical attack vector. The vulnerability requires low complexity and no privileges or user interaction, but demands physical access to the target system. The CVSS 3.1 base sc...
CVE-2026-68833
CVE-2026-68833 is a heap-based buffer overflow in Windows NTFS (New Technology File System) that allows an unauthorized attacker to achieve code execution . The attack requires physical access to the system (CVSS:3.1 AV:P), with no privileges or user interaction needed, and results in high impact...
EUVD-2026-73194
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...
cve-2026-29923
CVE-2026-29923 — pstrip64.sys Local Privilege Escalation A minimal proof-of-concept for CVE-2026-29923, a vulnerability in the pstrip64.sys kernel driver EnTech Taiwan PowerStrip ≤ 3.90.736 that allows an unprivileged user-mode process to escalate to NT AUTHORITY\SYSTEM. The Bug pstrip64.sys...
Eneio64-LPE
Opens a handle to the vulnerable driver 2. Maps physical memory into userspace 3. Opens a handle to the System process 4. Queries the SystemHandleInformation table of the current process for the obatined system handle leaking its EPROCESS address. 5. Walks System EPROCESS ActiveProcessLinks...
CVE-2026-45585
🔑 CVE-2026-45585 - YellowKey 🔓 Advanced mitigation for CVE-2026-45585 YellowKey 📌 What is YellowKey Vulnerability? YellowKey CVE-2026-45585 is a zero-day physical attack vulnerability discovered in May 2026 that allows attackers with physical access to completely bypass BitLocker encryption on...
CVE-2026-20293
A vulnerability in the UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances allows bypassing UEFI Secure Boot validation checks. The root cause is the availability of memory write commands in the UEFI Shell while Secure Boot is enabled. An attacker—authenticated with user or ad...
CVE-2026-20293 Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...
Windows Spaceport.sys Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...
Windows Spaceport.sys Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...