Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.5
CVE-2026-94142: BioStar Temperature Monitor Utility allows local write to memory
CVE-2026-94142 · published 1 month ago
Summary
The BioStar Temperature Monitor Utility version 1.2.1806.2200 contains a flaw that lets anyone with access to the computer change where the program writes data in memory. This could cause the program to crash or allow an attacker to take control of the system. Apply the vendor's patch or remove the utility until a fix is available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| biostar | temperature monitor utility | 1.2.1806.2200 |
Original advisory text
BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where
A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub_1105C of the file BS_HWMIO64_W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where condition. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-119Buffer Overflow
CWE-123Write-what-where Condition
Timeline
Published21 Sep 2026
Updated3 Nov 2026
First seen21 Sep 2026
Track software like this
Free during beta