CVE-2021-41840
An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker
CVSS
8.2
Alto
EPSS
0.3%
p23
KEV
—
Exploit Today
7
0-100
Publicado: 3 feb 2022 · Última mod.: 11 ago 2026 · CWE-770
0.3%EPSS · 30 días0.3%
2026-08-122026-09-09
An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of Functionality from an Untrusted Control Sphere.
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220217-0014/
- www.insyde.comhttps://www.insyde.com/security-pledge
- www.insyde.comhttps://www.insyde.com/security-pledge/SA-2022018
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220217-0014/
- www.insyde.comhttps://www.insyde.com/security-pledge
- www.insyde.comhttps://www.insyde.com/security-pledge/SA-2022018
- www.kb.cert.orghttps://www.kb.cert.org/vuls/id/796611
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-306654.html
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-543944.3 MED—
——0PocketMine-MP before 4.18.0-ALPHA2 fails to rate-limit mismatch type InventoryTransactionPacket requests, allowing attackers to trigger excessive inventory synchronization. Attackers can send numerous mismatch transactions to force the server to transmit large amounts of serialized inventory data, consuming significant bandwidth without authentication.1dCVE-2026-539376.2 MED8.4%
——3MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, `ReadBuffer.append` in `kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt` writes every chunk of bytes received from the stdio transport into a `kotlinx.io.Buffer` with no size cap. Frames are extracted from that buffer only when a `\n` (0x0a) byte is observed. A peer that streams bytes without ever sending a newline causes the internal buffer to grow indefinitely until the JVM (or the surrounding host process) is OOM-killed. The leak is amplified by `StdioServerTransport` and `StdioClientTransport`, which both queue raw chunks through a `kotlinx.coroutines.channels.Channel<ByteArray>(Channel.UNLIMITED)` and then call `readBuffer.append(chunk)` without backpressure or size guard. This is a remote-pre-auth denial of service whenever an SDK stdio server's stdin is fed by an untrusted or attacker-controlled producer (for example: a host program that exec's the MCP server as a subprocess and pipes through bytes received from a network peer, or a sidecar wrapper that proxies bytes from an HTTP endpoint to the stdio transport). Version 0.13.0 fixes the issue.2dCVE-2026-86075—21.5%
——6n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirect_uris but accepted arbitrarily large client_name and grant_types values. An unauthenticated remote caller could repeatedly persist oversized values in oauth_clients and exhaust database storage. The affected validation is in packages/cli/src/modules/oauth-server/oauth-server.service.ts, including MAX_CLIENT_NAME_LENGTH and MAX_GRANT_TYPES. This issue is fixed in versions 2.37.7 and 2.38.2.1dCVE-2026-729785.9 MED54.5%
——16Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.2dCVE-2026-693746.5 MED63.4%
——19Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.2dCVE-2026-570997.5 ALT55.0%
——17Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.2d