https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-70616.htmlhttps://patchthecve.com/cve/CVE-2025-70616.htmlWed, 17 Jun 2026 10:03:21 +0000HIGH 7.8: A stack buffer overflow vulnerability exists in the Wincor Nixdorf wnBios64.sys kernel driver (version 1.2.0.0) in the IOCTL handler for code 0x80102058. The vulnerability is caused by missing bounds checking on the user-controlled Options parameter before copying data into a 40-byte stack buffer (Shttps://patchthecve.com/cve/CVE-2024-46917.htmlhttps://patchthecve.com/cve/CVE-2024-46917.htmlWed, 17 Jun 2026 07:56:11 +0000HIGH 8.1: Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g., thhttps://patchthecve.com/cve/CVE-2024-46916.htmlhttps://patchthecve.com/cve/CVE-2024-46916.htmlWed, 17 Jun 2026 07:56:11 +0000HIGH 8.1: Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, ihttps://patchthecve.com/cve/CVE-2023-40261.htmlhttps://patchthecve.com/cve/CVE-2023-40261.htmlWed, 17 Jun 2026 06:16:54 +0000MEDIUM 6.8: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hahttps://patchthecve.com/cve/CVE-2023-33206.htmlhttps://patchthecve.com/cve/CVE-2023-33206.htmlWed, 17 Jun 2026 06:01:18 +0000MEDIUM 6.8: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails to validate symlinks during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard diskhttps://patchthecve.com/cve/CVE-2023-28865.htmlhttps://patchthecve.com/cve/CVE-2023-28865.htmlWed, 17 Jun 2026 05:48:56 +0000MEDIUM 6.6: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate the directory contents of certain directories (e.g., ensuring the expected hash sum) during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker https://patchthecve.com/cve/CVE-2023-24064.htmlhttps://patchthecve.com/cve/CVE-2023-24064.htmlWed, 17 Jun 2026 05:38:35 +0000MEDIUM 6.8: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR4 fails to validate /etc/initab during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.https://patchthecve.com/cve/CVE-2023-24063.htmlhttps://patchthecve.com/cve/CVE-2023-24063.htmlWed, 17 Jun 2026 05:38:35 +0000MEDIUM 6.8: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk.https://patchthecve.com/cve/CVE-2023-24062.htmlhttps://patchthecve.com/cve/CVE-2023-24062.htmlWed, 17 Jun 2026 05:38:35 +0000MEDIUM 6.8: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate the directory structure of the root file system during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the content