Live › vulnerability › CVE-2026-109836
The Core Temp hardware monitoring tool from ALCPU ships a kernel driver whose exposed IOCTL interface lacks proper access control. An attacker who can call that interface may read or write physical memory, which can lead to full control of the machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 23:45 UTC. All times on this page are UTC.
Windows PCs and servers running Core Temp (ALCPU) before version 1.21 are affected. JVN rates the attack as local with high privileges required (CVSS 4.0 8.4, CVSS 3.0 6.7), so it is not reachable over the network; an attacker needs to already be on the machine with elevated rights, and could then read or write physical memory through the driver. Machines without Core Temp, or with 1.21 or later, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Core Temp | vendor | < 1.21 | 1.21 |
Update Core Temp to 1.21 (released 3 Oct 2026), which the vendor changelog lists as mitigating the legacy 64-bit driver vulnerabilities (JVN#23328936).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.
This page as .md · .json · in your agent: get_signal("CVE-2026-109836")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.