https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:22:48.794977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-256548 EUVD-2026-256548 2026-10-08T20:22:48.797635+00:00 EUVD-2026-256548 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3431 fkie_cve-2008-3431 2026-10-08T20:22:48.797670+00:00

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.

 https://cve.radiocsirt.org/vuln/ghsa-pxp3-358m-6vfm GHSA-pxp3-358m-6vfm 2026-10-08T20:22:48.797702+00:00

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.

 https://cve.radiocsirt.org/vuln/gsd-2008-3431 gsd-2008-3431 2026-10-08T20:22:48.797760+00:00 gsd-2008-3431