<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>ELAN Microelectronics Corp. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/elan" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by ELAN Microelectronics Corp. (elan).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/elan.png</url>
      <title>ELAN Microelectronics Corp. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-18909 · 5.6 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2026-18909</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18909</guid>
      <description>A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report cou…</description>
      <category>Medium</category>
      <pubDate>Thu, 06 Aug 2026 03:46:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-0454 · 6 MEDIUM — Security Vulnerability on Match-on-Chip FPR Architecture</title>
      <link>https://vulnogram.org/CVE-2024-0454</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-0454</guid>
      <description>ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Versio…</description>
      <category>Medium</category>
      <pubDate>Fri, 12 Jan 2024 01:48:47 GMT</pubDate>
    </item>
  </channel>
</rss>
