CVE-2026-109836
Medium · 6.7CVSS
6.7
EPSS
0.1%
Published
Nov 3, 2026
CISA due date
—
The record
The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-80116 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-782
- CVE-2026-80117 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-782
- CVE-2026-80113 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-782
- CVE-2026-9492 The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed… CWE-782
- CVE-2026-57851 MSI Feature Manager contains a local privilege escalation vulnerability in the… CWE-782
- CVE-2026-8797 An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. CWE-782
- CVE-2026-56129 Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook… CWE-782
- CVE-2026-8501 Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet… CWE-782