CVE-2026-81581 User input in WibuKey is used (without proper sanitization) to compute the address of a pointer, which can be exploited to let the user point to any storage, to which Windows responds with a denial of service.

Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...

CVE-2026-81581

WibuKey up to 6.70 for Windows contains an improper validation of memory boundaries vulnerability in its WibuKey64.sys kernel driver. User input is used without proper sanitization to compute a pointer address, allowing an attacker to point to arbitrary memory outside the driver's scope. The typi...

EUVD-2026-63750

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel...

EUVD-2026-63747

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...

CVE-2026-19442

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel...

CVE-2026-18840

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...

CVE-2026-19442

CVE-2026-19442 is a pointer validation flaw in the AIX Virtual SCSI (vSCSI) initiator driver affecting IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . Successful exploitation can lead to denial of service , privilege escalation , or full compromise of the client LPAR kernel . The CVSS 3.1 score is 8....

CVE-2026-19442 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel...

CVE-2026-18840

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation via improper validation of an attacker-controlled pointer, enabling arbitrary code execution (CVSS 8.2 HIGH). No patch version or remediation guidance is provided in the documents; no in-the-wild exploitation is rep...

CVE-2026-18840 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...

PT-2026-79253

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. This issue could allow an attacker to cause a denial of service, escalate privileges, or...

PT-2026-79250

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Local attackers can execute arbitrary code due to improper validation of an attacker-controlled pointer. Recommendations At the moment, there is no information about a newer...

EUVD-2026-62835

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers...

CVE-2026-16919 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers...

CVE-2026-16919

CVE-2026-16919 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is improper validation of network-supplied pointers , allowing a remote, unauthenticated attacker to execute arbitrary code over the network. The CVSS 3.1 score is 9.8 (CRITICAL) with full impact on confidentiality,...

PT-2026-78670

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote attackers can execute arbitrary code due to improper validation of network-supplied pointers. Recommendations At the moment, there is no information about a newer...

CVE-2026-9771

CVE-2026-9771 is a missing device-pointer validation vulnerability in the Zephyr RTOS flash_copy() system call (drivers/flash/flash_util.c), affecting builds with CONFIG_USERSPACE enabled. The handler z_vrfy_flash_copy() validated only the output buffer but passed src_dev and dst_dev directly to ...

CVE-2026-12364 Missing user-space pointer validation in logging syscall z_log_msg_static_create allows kernel memory disclosure and denial of service

The user-space system-call verifier zvrfyzlogmsgstaticcreate in subsys/logging/logmsg.c was a pure pass-through: it forwarded the caller-supplied source, desc, package, and data arguments directly to the kernel-mode implementation zimplzlogmsgstaticcreate without performing any of the mandatory...

CVE-2026-18249

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses...

CVE-2026-18249 IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses...