CVE-2026-39254

Buffer Overflow vulnerability in SteelSeries GG macOS v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString components...

CVE-2026-39255

Buffer Overflow vulnerability in SteelSeries GG macOS v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, dupwcs components...

CVE-2026-39255

A buffer overflow in SteelSeries GG v107.0.0 for macOS, located in the libSSEdevice.dylib library's dup_wcs function, allows an unauthenticated remote attacker to execute arbitrary code. CVSS 9.8 (Critical); no patch or exploit code is mentioned in the provided documents.

EUVD-2026-60447

Buffer Overflow vulnerability in SteelSeries GG macOS v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString components...

EUVD-2026-60446

Buffer Overflow vulnerability in SteelSeries GG macOS v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, dupwcs components...

CVE-2026-39254

A buffer overflow in SteelSeries GG v.107.0.0 on macOS (libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString) allows unauthenticated remote attackers to execute arbitrary code with CVSS 9.8 (Critical). No patch or remediation version is provided in the documents. Exploitation details ...

CVE-2026-39254

Buffer Overflow vulnerability in SteelSeries GG macOS v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString components...

CVE-2026-39255

Buffer Overflow vulnerability in SteelSeries GG macOS v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, dupwcs components...

CVE-2025-68921

SteelSeries Nahimic 3 1.10.7 allows Directory traversal...

CVE-2025-68921

SteelSeries Nahimic 3 1.10.7 allows Directory traversal...

CVE-2025-68921

SteelSeries Nahimic 3 1.10.7 allows Directory traversal...

CVE-2025-68921

SteelSeries Nahimic 3 1.10.7 allows Directory traversal...

SteelSeries Nahimic 3 security vulnerability

The SteelSeries Nahimic 3 is a high-end audio driver developed by the Danish company SteelSeries. Version 1.10.7 of the SteelSeries Nahimic 3 contains a security vulnerability, which can be exploited by directory traversal attacks...

CVE-2025-68921

SteelSeries Nahimic 3 1.10.7 allows Directory traversal...

CVE-2025-68921

SteelSeries Nahimic 3 1.10.7 allows Directory traversal...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000956 advisory. drivers/hid/hid-steelseries.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSTEELSERIES is enabled, allows physically...

CVE-2025-68921

The CVE-2025-68921 entry concerns SteelSeries Nahimic 3 1.10.7. A local directory traversal flaw in Nahimic enables a low-privilege user to escalate to NT AUTHORITY\SYSTEM. Multiple connected sources confirm a local privilege escalation vector, with documented exploit writeups (e.g., GitHub explo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002247 advisory. drivers/hid/hid-steelseries.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSTEELSERIES is enabled, allows physically...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001811)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001811 advisory. drivers/hid/hid-steelseries.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSTEELSERIES is enabled, allows physically...

CVE-2023-31461

Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability...