Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...

CVE-2026-33197 BDS Module Bypass Secure Boot Advisory

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability...

CVE-2026-33197 BDS Module Bypass Secure Boot Advisory

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability...

CVE-2026-33197

AMI APTIOV BIOS contains a vulnerability in the BDS Module (Secure Boot) where an incomplete list of disallowed inputs allows a privileged local user to bypass Secure Boot and achieve arbitrary code execution . The CVSS v4.0 score is 8.7 (HIGH) , with low attack complexity, high privileges requir...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

Windows Secure Boot Security Feature Bypass Vulnerability

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

SUSE CVE-2026-80255

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

CVE-2026-73009: Use After Free

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

Trapdoor Functions with Secure Key Leasing and Copy Protection

Inspired by the no-cloning theorem in quantum theory, a variety of quantum cryptographic primitives with unclonable functionalities, such as secure key leasing and copy protection, have been proposed and attracted significant attention. However, trapdoor functions TDFs, fundamental primitives in...

PT-2026-87141

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...

PT-2026-87673

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

PT-2026-87756

Name of the Vulnerable Software and Affected Versions Windows Secure Kernel Mode affected versions not specified Description An integer overflow or wraparound occurs in Windows Secure Kernel Mode, which allows an authorized attacker to elevate privileges locally. An integer overflow is a conditio...

PT-2026-87779

Name of the Vulnerable Software and Affected Versions Windows Secure Kernel Mode affected versions not specified Description A heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-87523

Name of the Vulnerable Software and Affected Versions Windows Secure Kernel Mode affected versions not specified Description An untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. A pointer dereference occurs when a program...

CVE-2026-69906: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-20293: Exposed Dangerous Method or Function

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...

CVE-2026-72931: Missing Release of Resource after Effective Lifetime

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...