Security Vulnerabilities - CVEs Published In January 2026
Memory corruption while deinitializing a HDCP session.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-01-07
Memory corruption while processing a video session to set video parameters.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-01-07
Memory corruption while handling sensor utility operations.
CVSS Score
6.7
EPSS Score
0.001
Published
2026-01-07
Transient DOS while parsing video packets received from the video firmware.
CVSS Score
5.5
EPSS Score
0.001
Published
2026-01-07
Information disclosure while processing a firmware event.
CVSS Score
6.1
EPSS Score
0.001
Published
2026-01-07
Memory corruption while processing a config call from userspace.
CVSS Score
6.7
EPSS Score
0.001
Published
2026-01-07
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVSS Score
6.6
EPSS Score
0.001
Published
2026-01-07
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods.
CVSS Score
2.0
EPSS Score
0.002
Published
2026-01-07
Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests.
CVSS Score
2.9
EPSS Score
0.001
Published
2026-01-07
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.
CVSS Score
2.2
EPSS Score
0.003
Published
2026-01-07