Veille CVE

Semaine du 19 octobre au 25 octobre 2026

5 CVE

Critique 0 Élevée 1 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « HMS Networks PEAK-System Device Driver Setup » ✕
  1. CVE-2026-110322 5.5 Moyenne

    HMS Networks PEAK-System Device Driver Setup · HMS Networks PCAN Windows CAN device drivers

    The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.

  2. CVE-2026-109576 5.5 Moyenne

    HMS Networks PEAK-System Device Driver Setup · HMS Networks PCAN Windows CAN device drivers

    The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.

  3. CVE-2026-105960 5.5 Moyenne

    HMS Networks PEAK-System Device Driver Setup · HMS Networks PCAN Windows CAN device drivers

    PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.

  4. CVE-2026-103672 7.1 Élevée

    HMS Networks PEAK-System Device Driver Setup · HMS Networks PCAN Windows CAN device drivers

    The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.

  5. CVE-2026-101103 5.5 Moyenne

    HMS Networks PEAK-System Device Driver Setup · HMS Networks PCAN Windows CAN device drivers

    The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record.