2658 matches found
CVE-2026-64463
A flaw was found in the Linux kernel's USB Type-C subsystem, specifically within the tcpcirt1711h driver. When a USB Type-C port is initialized, the system may fail to properly unregister the port if certain setup steps do not complete successfully. This oversight in resource management could lea...
CVE-2026-17868
Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13307
Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...
CVE-2026-13307 Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability
Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...
EUVD-2026-50559
Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...
CVE-2026-13306
Autel MaxiCharger AC Elite Home EV chargers are affected by CVE-2026-13306: a flaw in the exposed USB interface allows physically present attackers to bypass authentication without prior authentication. The issue stems from lack of authentication before accessing functionality, enabling bypass on...
CVE-2026-64505
A flaw was found in the Linux kernel's USB RNDIS gadget function. A missing length check for the RNDIS header in the rndisrmhdr function could allow an attacker to read data beyond the intended buffer. This out-of-bounds read vulnerability could lead to information disclosure or potentially a...
CVE-2026-64344
A flaw was found in the Linux kernel's USB idmouse driver. A local attacker could exploit a use-after-free vulnerability due to a race condition that occurs when a USB idmouse device is disconnected. This race condition allows mutexunlock to access freed memory, which can lead to a system crash a...
CVE-2026-64348
A flaw was found in the Linux kernel's Universal Serial Bus USB subsystem. When an isochronous USB request block URB submission fails, the associated schedule is not properly freed. This memory leak can accumulate over time, potentially leading to memory exhaustion and a denial of service DoS for...
CVE-2026-64478
A flaw was found in the Linux kernel's ALSA USB audio driver, specifically affecting DualSense controllers. A local attacker with physical access to a DualSense controller could exploit this by rapidly disconnecting and reconnecting the device due to a weak physical connection. This action can...
[SECURITY] Fedora 43 Update: gpsd-3.26.1-7.fc43
gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...
PT-2026-65940
Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description Incorrect default permissions on a directory used for the USB filesystem mount point allow a physically present attacker to escalate privileges. An attacker who can already execute...
PT-2026-65947
Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-13880
An use after free flaw was found in the USB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499025880...
CVE-2026-13882
An inappropriate implementation flaw was found in the USB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499162550...
CVE-2026-64242
A flaw was found in the Linux kernel's USB gadget net2280 driver. This vulnerability occurs due to a double free error in the probe error path. When a gadget device is being initialized, an error can cause the device to be freed twice, leading to memory corruption. This can result in a denial of...
UBUNTU-CVE-2026-64547
In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...
CVE-2026-64233
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts-lock across XU walks in uvcfunctionbind uvcfunctionbind walks &opts-extensionunits twice without holding opts-lock: - directly, for the iExtension string-descriptor fixup loop; - indirectly, four times...
CVE-2026-64240
In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f "media: rc: igorplugusb: heed coherency rules" changed the control request storage from an embedded struct to an allocated pointer so it can obey DMA...
