CVE-2026-56129
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Jun 25, 2026
CISA due date
—
The record
Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrative privilege may access physical memory.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-80116 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-782
- CVE-2026-80117 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-782
- CVE-2026-80113 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-782
- CVE-2026-57851 MSI Feature Manager contains a local privilege escalation vulnerability in the… CWE-782
- CVE-2026-8797 An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. CWE-782
- CVE-2026-8501 Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet… CWE-782
- CVE-2026-6737 An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a… CWE-782
- CVE-2026-36355 The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions… CWE-782