CVE-2025-47348: Use of Uninitialized Variable

Memory corruption while processing identity credential operations in the trusted application...

CVE-2025-47356: Double Free

Memory Corruption when multiple threads concurrently access and modify shared resources...

CVE-2025-47369: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID...

CVE-2025-47380: Untrusted Pointer Dereference

Memory corruption while preprocessing IOCTLs in sensors...

CVE-2025-47388: Buffer Copy without Checking Size of Input

Memory corruption while passing pages to DSP with an unaligned starting address...

CVE-2025-47396: Double Free

Memory corruption occurs when a secure application is launched on a device with insufficient memory...

CVE-2025-47344: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory corruption while handling sensor utility operations...

CVE-2025-47346: Out-of-bounds Write

Memory corruption while processing a secure logging command in the trusted application...

CVE-2025-47393: Improper Validation of Array Index

Memory corruption when accessing resources in kernel driver...

CVE-2025-47394: Buffer Copy without Checking Size of Input

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations...

CVE-2025-47395: Buffer Over-read

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element...

CVE-2025-14612: Insecure Temporary File

Insecure Temporary File vulnerability in Altera Quartus Prime Pro Installer SFX on Windows allows : Use of Predictable File Names.This issue affects Quartus Prime Pro: from 24.1 through 25.1.1...

CVE-2026-22542: Uncontrolled Resource Consumption

An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service...

CVE-2025-4676: Incorrect Implementation of Authentication Algorithm

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K...

CVE-2025-4675: Improper Check for Unusual or Exceptional Conditions

Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K...

PT-2026-2104

Name of the Vulnerable Software and Affected Versions Tarkov Data Manager versions prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8 Description The Tarkov Data Manager is a tool used to manage Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, a time-based blind S...

CVE-2026-21856: Improper Neutralization of Special Elements used in an SQL Command

The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, a time based blind SQL injection vulnerability in the webhook edit and scanner api endpoints that allow an authenticated attacker to execute arbitrary SQL queries against th...

CVE-2026-21500: Improper Input Validation

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the XML calculator macro expansion. This issue has been patched in version 2.3.1.2...

CVE-2026-22535: Undefined Security Weakness

An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured unencrypted MQTT communications protocol, write on the server topics of the board that controls the MQTT communications...

CVE-2026-0668: Inefficient Regular Expression Complexity

Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issue affects MediaWiki - VisualData Extension: 1.45...