CVE-2026-81579: Write-what-where Condition

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

PT-2026-82481

Name of the Vulnerable Software and Affected Versions WibuKey versions prior to 6.71 Description Improper validation of memory boundaries in the WibuKey64.sys driver allows an attacker to set pointers outside the program scope. This occurs because user input is used without proper sanitization to...

CVE-2026-81581: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...

CVE-2026-75336: Improper Neutralization of Special Elements used in an SQL Command

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...

The vulnerability of the mpfs_sys_controller_probe() function in the drivers/soc/microchip/mpfs-sys-controller.c file of the SOC kernel driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mpfssyscontrollerprobe function in the drivers/soc/microchip/mpfs-sys-controller.c file of the Linux operating system’s SOC System on Chip kernel module is related to improper memory release. Exploitation of this vulnerability can allow a remote attacker to cause a servic...

Malicious code in mega-smart-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15724 Malicious code in mega-smart-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-fast-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15713 Malicious code in mega-fast-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-clean-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15712 Malicious code in mega-clean-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-74388

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Open Sound System OSS sequencer. A local attacker could exploit a Use-After-Free UAF vulnerability by concurrently closing a sequencer port while an event containing System Exclusive SysEx data is pending dispatch. This...

BIT-OPENBAO-2026-45808 OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...

PT-2026-72292

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.9 and later Description A refactoring in the device-mapper dm component causes the caller's thread keyring to persist beyond the caller's lifetime. This occurs when cryptsetup luksOpen uses a thread keyring to pass a...

GLSA-202608-11 : haveged: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202608-11 haveged: Privilege escalation A vulnerability has been discovered in haveged. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo...

EUVD-2026-54976

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-45808 OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...

CVE-2026-46405 OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, in OpenBao's Kerberos auth method on the GET handler, or when an Authorization: Negotiate header is supplied, the response is includes a logical.Auth object in addition to an error message. This results in...

CVE-2026-19195 V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed ...