Lucene search
+L

9399 matches found

NVD
NVD
added 2026/05/15 3:16 a.m.33 views

CVE-2025-0040

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS0.00125EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/15 2:09 a.m.11 views

CVE-2025-0040

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS5.8AI score0.00125EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/05/15 2:09 a.m.60 views

CVE-2025-0040

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS0.00125EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/15 12:00 a.m.31 views

PT-2026-41245

Improper access control between the Joint Test Action Group JTAG and Advanced Extensible Interface AXI could allow an attacker with physical access to read or overwrite the contents of cross-chip debug XCD registers potentially resulting in loss of data integrity or confidentiality...

5.3CVSS5.8AI score0.00125EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.18 views

AMD Processors 访问控制错误漏洞

AMD Processors are a series of processors developed by American semiconductor company AMD. AMD Processors have a vulnerability related to access control. This vulnerability stems from improper access control mechanisms, which may allow attackers with physical access to read or overwrite the...

5.3CVSS5.8AI score0.00125EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/05/14 7:58 p.m.24 views

CVE-2026-36738

U-SPEED AC1200 Gigabit Wi-Fi Router Model: T18-21K V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, or access control mechanisms. An attacker with physical access to the UART pins can connect to the interface and gain...

6.8CVSS5.8AI score0.00299EPSS
SaveExploits1References1
CVE
CVE
added 2026/05/14 4:14 p.m.83 views

CVE-2026-6923

CVE-2026-6923 describes a side-channel vulnerability affecting TPMs where physical access is required to extract an Elliptic Curve Diffie-Hellman (ECDH) key. The vulnerability stems from a physical side channel to the TPM that can lead to key leakage. Documented impact is confidentiality loss (ex...

3.8CVSS5.8AI score0.00117EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/14 4:14 p.m.9 views

CVE-2026-6923

A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman ECDH key...

3.8CVSS5.8AI score0.00117EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/14 4:14 p.m.13 views

CVE-2026-6923 Nuvoton - CWE-1300: Improper Protection of Physical Side Channels

A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman ECDH key...

3.8CVSS5.8AI score0.00117EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/14 4:14 p.m.64 views

CVE-2026-6923 Nuvoton - CWE-1300: Improper Protection of Physical Side Channels

A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman ECDH key...

3.8CVSS0.00117EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/14 12:00 a.m.33 views

PT-2026-40966

A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman ECDH key...

3.8CVSS5.8AI score0.00117EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/05/13 8:23 p.m.15 views

CVE-2026-40380

Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack...

6.2CVSS6.1AI score0.00462EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/13 6:30 p.m.20 views

EUVD-2026-30043

U-SPEED AC1200 Gigabit Wi-Fi Router Model: T18-21K V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, or access control mechanisms. An attacker with physical access to the UART pins can connect to the interface and gain...

5.8AI score0.00299EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/05/13 6:30 p.m.20 views

EUVD-2026-29907

Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity...

6.8CVSS5.8AI score0.00211EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/13 5:53 p.m.14 views

CVE-2026-30904

Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access...

1.8CVSS5.8AI score0.00143EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/13 5:53 p.m.10 views

CVE-2026-30904

Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access...

5.8AI score0.00143EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/13 5:53 p.m.30 views

CVE-2026-30904

CVE-2026-30904 concerns Zoom Workplace for iOS prior to version 7.0.0, where a protection mechanism failure could allow an authenticated user with physical access to disclose information. The issue is described consistently across sources as a local, physical-access threat affecting the client, w...

4.3CVSS5.8AI score0.00143EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/05/13 6:16 a.m.36 views

CVE-2026-21021

Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity...

6.8CVSS0.00211EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/13 4:56 a.m.63 views

CVE-2026-21021

Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity...

5.1CVSS0.00211EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/13 4:56 a.m.34 views

CVE-2026-21021

Technical details are not publicly available in the provided documents. Monitor for updates.

6.8CVSS5.8AI score0.00211EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder