Base de CVEs

CVE-2026-59566 Alta · 8.4 CWE-229 24/08/2026

Local denial-of-service

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.

CVE-2026-59565 Alta · 8.8 CWE-229 24/08/2026

Local and kernel denial-of-service

A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.

CVE-2025-35973 Média · 4.5 CWE-229 11/08/2026

Improper handling of values for some Intel(R) Processors within Ring 0: Kernel…

Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

CVE-2026-4736 Alta · 7.3 CWE-229 24/03/2026

Math Issue in No-Chicken/Echo-Mate

Improper Handling of Values vulnerability in No-Chicken Echo-Mate (SDK/rv1106-sdk/sysdrv/source/kernel/include/net/netfilter modules). This vulnerability is associated with program files nf_tables.H‎, nft_byteorder.C‎, nft_meta.C‎. This issue affects Echo-Mate: before V250329.

CVE-2025-31648 Baixa · 3.9 CWE-229 10/02/2026

Improper handling of values in the microcode flow for some Intel(R) Processor Family may…

Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.

CVE-2025-7964 Crítica · 9.2 CWE-229 30/01/2026

Roteador Zigbee da Silicon Labs em Estado Não Reingressável via Requisição MAC 802.15.4 Malformada

Após o recebimento de uma 'malformed 802.15.4 MAC Data Request' (requisição de dados MAC 802.15.4 malformada), o Zigbee Coordinator envia uma requisição de 'network leave' ao roteador Zigbee, fazendo com que o roteador Zigbee fique preso em um estado não reingressável. Se um pai adequado não estiver disponível, os dispositivos finais não conseguirão reingressar. É necessário um recomissionamento manual para recuperar o roteador Zigbee.