CVE-2026-18283 Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-18273 Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

CVE-2026-18273

CVE-2026-18273 is a local privilege escalation vulnerability in the Kenwood DNR1007XR car audio/navigation unit. The root cause is incorrect default permissions on a directory used as the USB filesystem mount point , allowing a physically present attacker with low-privileged code execution to esc...

EUVD-2026-63420

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

ZoneMinder Snapshots - Command Injection

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...

CVE-2026-74551

A flaw was found in the Linux kernel's hwmon: nzxt-smart2 driver. This vulnerability allows for immediate and deterministic memory corruption on systems with non-coherent CPU architectures, such as ARM or MIPS. When operations like setting a fan speed or updating an interval trigger a USB Direct...

CVE-2026-74455

A flaw was found in the Linux kernel's peakusb Controller Area Network CAN driver. This vulnerability arises from insufficient validation of uCAN receive record lengths when processing data from a Universal Serial Bus USB receive buffer. A local attacker could potentially exploit this by sending...

CVE-2026-74458

A flaw was found in the Kvaser USB CAN driver kvaserusbleaf in the Linux kernel. This vulnerability occurs due to insufficient validation of received command lengths from a USB buffer. A malicious or malformed command shorter than the expected header length, or one that exceeds the destination...

CVE-2026-74497

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. A connected USB device could send oversized synchronization packets, causing the system to process data beyond its hardware limits. This could lead to a denial of service DoS or system instability...

CVE-2026-74505

A flaw was found in the ALSA 6fire driver within the Linux kernel. During error handling in the probe phase, the driver failed to properly manage a pending USB Request Block URB before freeing associated resources. This oversight could lead to a Use-After-Free UAF vulnerability. A local attacker...

CVE-2026-74498

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. When a USB audio endpoint requests full packet transfers using the fillmax descriptor flag, the system allocates an undersized Direct Memory Access DMA buffer. This allows a malicious USB device to...

CVE-2026-72443

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA USB audio driver. During the handling of MIDI 2.0 input Universal Serial Bus USB Request Blocks URBs, a setup failure can lead to a use-after-free vulnerability. This allows a local attacker, or a malicious USB device, ...

CVE-2026-74501

A flaw was found in the ALSA USB audio driver of the Linux kernel. A malicious USB MIDI 2.0 device can trigger a use-after-free vulnerability by causing a creation failure after an endpoint is registered. This can lead to a slab use-after-free read when the Universal MIDI Packet UMP node is...

CVE-2026-20302

A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privileges. This vulnerability is due to insufficient boundary checks for specific data that is provided...

CVE-2026-72446

A flaw was found in the Linux kernel's ALSA USB audio subsystem qcom. An unprivileged local user can exploit this vulnerability by sending a crafted request over AFQIPCRTR to disable a stream with no active interface. This can lead to an out-of-bounds write, resulting in memory corruption or a...

CVE-2026-20302 Cisco RoomOS Stack Overflow Vulnerability

A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privileges. This vulnerability is due to insufficient boundary checks for specific data that is provided...

EUVD-2026-62563

A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privileges. This vulnerability is due to insufficient boundary checks for specific data that is provided...

CVE-2026-20302

CVE-2026-20302 is a buffer overflow vulnerability in the USB driver of Cisco RoomOS . The root cause is insufficient boundary checks on data processed through the USB driver. An unauthenticated, local attacker with physical access to the device's USB port can exploit this by connecting a maliciou...

CVE-2026-74437

A flaw was found in the Linux kernel's uvcvideo module, which manages USB Video Class UVC devices. When a UVC camera with asynchronous control is in use, a specific sequence of operations can lead to a deadlock within the kernel. This vulnerability could allow a local attacker to cause a...

CVE-2026-76044

A flaw was found in Google Chrome's USB component. A remote attacker, after compromising the renderer process, could exploit a race condition by using a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox, allowing...