4147 matches found
CVE-2026-40003
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow,...
CVE-2026-40003 USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow,...
CVE-2026-40003
CVE-2026-40003 describes a USB-based arbitrary memory write vulnerability in the ZTE ZX297520V3 BootROM. The issue arises from lack of target address validation in the USB download mode, allowing writes to arbitrary locations in BootROM runtime memory. Potential consequences, as stated, include o...
CVE-2026-40003
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow,...
EUVD-2026-28232
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow,...
CVE-2026-40003 USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow,...
CVE-2026-40003: Out-of-bounds Write
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow,...
PT-2026-38322
Name of the Vulnerable Software and Affected Versions ZTE ZX297520V3 affected versions not specified Description The BootROM contains an issue allowing arbitrary memory writes via USB. Due to a lack of target address validation in the USB download mode, it is possible to write data to any locatio...
Exploit for CVE-2025-0690
CVE-2025-0690: Vulnerabilidad de Desbordamiento de Enteros en...
Exploit for Acceptance of Extraneous Untrusted Data With Trusted Data in Microsoft
BitUnlocker Downgrade Attack A proof of concept for accessing...
April 30, 2026—KB5083631 (OS Builds 26200.8328 and 26100.8328) Preview
None None...
The vulnerability of the Secure Boot component in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Secure Boot component in Linux operating systems is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
Linux kernel double free in Xen privcmd driver
ISSUE DESCRIPTION The Linux kernel's privcmd driver can be abused to circumvent kernel lockdown secure boot by causing a double free of kernel memory. Note that this operation can be performed by root only, so any further impact on the system like denial of service is not security relevant. IMPAC...
OESA-2026-2079 shim security update
Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to bypass existing security mechanisms
The vulnerability of the Secure Boot protocol for operating systems running Windows lies in the absence of a necessary encryption step. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms...
April 19, 2026—KB5091572 (OS Build 14393.9062) Out-of-band
None None...
April 19, 2026—KB5091575 (OS Build 20348.5024) Out-of-band
None None...
April 19, 2026—KB5091573 (OS Build 17763.8647) Out-of-band
None None...
The vulnerability in the implementation of the Secure Boot protocol for Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of the Secure Boot secure bootloading protocol for the Windows operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...
Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities
Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 vulnerabilities, 157 are rated Important, eight are rated Critical, three are rated Moderate, and one i...