WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product android✕
Overview 9,143 matches · 8 in Waratek scope · 2 protected · 47 exploited · 35 CISA KEV · 149 public PoC · 14 EPSS ≥ 0.5
9,143matches 8in Waratek scope0.1% 2protected0.0% 47exploited0.5% 35CISA KEV0.4% 149public PoC1.6% 14EPSS ≥ 0.50.2%
Protected by Waratek 2 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 6 0.1% Outside Waratek scope 7 0.1% Not applicable 9,128 99.8% Withdrawn CVE 0 0.0%
Critical 677 7.4% High 4,175 45.7% Medium 4,052 44.3% Low 239 2.6% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 0.0% partly blocked 0 0.0% not blocked 9,141 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 47 0.5% Working exploit published 57 0.6% Proof of concept only 84 0.9% Forecast only 7 0.1% No public exploit 8,948 97.9%
split by peak 1,583 / year
Not applicable: 9,128Outside Waratek scope: 7No exploit published: 6Protected by Waratek: 2 Low: 239Medium: 4,052High: 4,175Critical: 677 not blocked: 9,141blocked by ARMR today: 2 No public exploit: 8,948Forecast only: 7Proof of concept only: 84Working exploit published: 57Exploited: 47
20082 Not applicable2 High1 Medium1 not blocked2 Working exploit published2 20098 Not applicable8 High3 Medium5 not blocked8 No public exploit8 20101 Not applicable1 High1 not blocked1 Exploited1 201112 Not applicable12 High3 Medium7 Low2 not blocked12 Exploited1 Working exploit published3 No public exploit8 201244 Not applicable44 High30 Medium14 not blocked44 Working exploit published1 Proof of concept only1 No public exploit42 201317 Not applicable17 High10 Medium5 Low2 not blocked17 Exploited1 Working exploit published2 No public exploit14 201434 Not applicable34 High14 Medium17 Low3 not blocked34 Exploited3 Working exploit published4 Proof of concept only1 No public exploit26 2015125 Not applicable125 High91 Medium33 Low1 not blocked125 Exploited3 Working exploit published5 Proof of concept only4 Forecast only6 No public exploit107 2016526 Outside Waratek scope1 Not applicable525 Critical47 High329 Medium145 Low5 not blocked526 Exploited2 Working exploit published11 Proof of concept only6 Forecast only1 No public exploit506 2017847 Protected by Waratek1 Not applicable846 Critical109 High543 Medium190 Low5 blocked by ARMR today1 not blocked846 Exploited1 Working exploit published9 Proof of concept only6 No public exploit831 2018618 Protected by Waratek1 No exploit published1 Outside Waratek scope1 Not applicable615 Critical73 High453 Medium88 Low4 blocked by ARMR today1 not blocked617 Exploited1 Working exploit published11 Proof of concept only2 No public exploit604 2019494 Outside Waratek scope1 Not applicable493 Critical16 High251 Medium217 Low10 not blocked494 Exploited1 Working exploit published6 Proof of concept only2 No public exploit485 2020919 No exploit published1 Outside Waratek scope1 Not applicable917 Critical163 High331 Medium394 Low31 not blocked919 Exploited2 Working exploit published3 Proof of concept only11 No public exploit903 2021660 No exploit published1 Outside Waratek scope1 Not applicable658 Critical28 High252 Medium356 Low24 not blocked660 Exploited11 Proof of concept only2 No public exploit647 20221,241 No exploit published2 Outside Waratek scope2 Not applicable1,237 Critical76 High428 Medium656 Low81 not blocked1,241 Exploited2 Proof of concept only10 No public exploit1,229 20231,583 Not applicable1,583 Critical53 High439 Medium1,066 Low25 not blocked1,583 Exploited5 Proof of concept only10 No public exploit1,568 2024739 Not applicable739 Critical42 High337 Medium346 Low14 not blocked739 Exploited6 Proof of concept only7 No public exploit726 2025568 Not applicable568 Critical25 High282 Medium254 Low7 not blocked568 Exploited5 Proof of concept only10 No public exploit553 2026705 No exploit published1 Not applicable704 Critical45 High377 Medium258 Low25 not blocked705 Exploited2 Proof of concept only12 No public exploit691
2008201020122014201620182020202220242026
9,143 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 92 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-56997 High 2026-09-15 Not applicable No public exploit In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56992 Medium 2026-09-15 Not applicable No public exploit In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56989 Medium 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56988 Medium 2026-09-15 Not applicable No public exploit In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56986 High 2026-09-15 Not applicable No public exploit In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56985 High 2026-09-15 Not applicable No public exploit In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56982 High 2026-09-15 Not applicable No public exploit In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56979 Medium 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56978 High 2026-09-15 Not applicable No public exploit In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56975 Medium 2026-09-15 Not applicable No public exploit In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56974 High 2026-09-15 Not applicable No public exploit In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-56973 Medium 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56972 Medium 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56970 High 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56967 High 2026-09-15 Not applicable No public exploit In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56964 Medium 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56960 Critical 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56958 Medium 2026-09-15 Not applicable No public exploit In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56950 Medium 2026-09-15 Not applicable No public exploit In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56945 High 2026-09-15 Not applicable No public exploit In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56942 High 2026-09-15 Not applicable No public exploit In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56941 High 2026-09-15 Not applicable No public exploit In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56932 Medium 2026-09-15 Not applicable No public exploit In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56923 Medium 2026-09-15 Not applicable No public exploit In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56922 Medium 2026-09-15 Not applicable No public exploit In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56920 High 2026-09-15 Not applicable No public exploit In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56915 Medium 2026-09-15 Not applicable No public exploit In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56914 High 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56907 Medium 2026-09-15 Not applicable No public exploit In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56892 Medium 2026-09-15 Not applicable No public exploit In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56889 Medium 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56888 Medium 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56882 High 2026-09-15 Not applicable No public exploit In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56881 High 2026-09-15 Not applicable No public exploit In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56879 Medium 2026-09-15 Not applicable No public exploit In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55366 Critical 2026-09-15 Not applicable No public exploit In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55365 Medium 2026-09-15 Not applicable No public exploit In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55359 High 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55351 High 2026-09-15 Not applicable No public exploit In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55343 High 2026-09-15 Not applicable No public exploit In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-55332 Medium 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55331 High 2026-09-15 Not applicable No public exploit In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55323 High 2026-09-15 Not applicable No public exploit In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55318 High 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55317 Medium 2026-09-15 Not applicable No public exploit In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55306 High 2026-09-15 Not applicable No public exploit In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55304 Medium 2026-09-15 Not applicable No public exploit In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55302 Medium 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55301 High 2026-09-15 Not applicable No public exploit In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0200 High 2026-09-15 Not applicable No public exploit In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0199 High 2026-09-15 Not applicable No public exploit In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0197 Medium 2026-09-15 Not applicable No public exploit In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0194 High 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0192 Medium 2026-09-15 Not applicable No public exploit In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0189 High 2026-09-15 Not applicable No public exploit In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0187 Medium 2026-09-15 Not applicable No public exploit In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0186 Medium 2026-09-15 Not applicable No public exploit In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0183 Medium 2026-09-15 Not applicable No public exploit In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0179 Medium 2026-09-15 Not applicable No public exploit In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0177 Medium 2026-09-15 Not applicable No public exploit In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0171 High 2026-09-15 Not applicable No public exploit In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0170 High 2026-09-15 Not applicable No public exploit In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0159 High 2026-09-15 Not applicable No public exploit In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-21112 Medium 2026-09-09 Not applicable No public exploit Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.
CVE-2026-21104 High 2026-09-09 Not applicable No public exploit Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-21103 Medium 2026-09-09 Not applicable No public exploit Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
CVE-2026-21102 Critical 2026-09-09 Not applicable No public exploit Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
CVE-2026-21101 High 2026-09-09 Not applicable No public exploit Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
CVE-2026-21100 Medium 2026-09-09 Not applicable No public exploit Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
CVE-2026-21099 Medium 2026-09-09 Not applicable No public exploit Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21098 Medium 2026-09-09 Not applicable No public exploit Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
CVE-2026-21097 Medium 2026-09-09 Not applicable No public exploit Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
CVE-2026-21096 Critical 2026-09-09 Not applicable No public exploit Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVE-2026-21095 Critical 2026-09-09 Not applicable No public exploit Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVE-2026-21094 Medium 2026-09-09 Not applicable No public exploit Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.
CVE-2026-21093 Medium 2026-09-09 Not applicable No public exploit Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2026-21092 High 2026-09-09 Not applicable No public exploit Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.
CVE-2026-21091 Medium 2026-09-09 Not applicable No public exploit Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21090 Medium 2026-09-09 Not applicable No public exploit Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21089 Medium 2026-09-09 Not applicable No public exploit Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21088 Medium 2026-09-09 Not applicable No public exploit Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21087 High 2026-09-09 Not applicable No public exploit Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.
CVE-2026-21086 Medium 2026-09-09 Not applicable No public exploit Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.
CVE-2026-21085 High 2026-09-09 Not applicable No public exploit Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2026-58941 High 2026-09-08 Not applicable No public exploit In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58874 High 2026-09-08 Not applicable No public exploit In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58848 High 2026-09-08 Not applicable No public exploit In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58846 High 2026-09-08 Not applicable No public exploit In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58839 High 2026-09-08 Not applicable No public exploit In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58823 High 2026-09-08 Not applicable No public exploit In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58822 Critical 2026-09-08 Not applicable No public exploit In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58820 High 2026-09-08 Not applicable No public exploit In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required.
CVE-2026-55294 High 2026-09-08 Not applicable No public exploit In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55290 Low 2026-09-08 Not applicable No public exploit In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55285 High 2026-09-08 Not applicable No public exploit In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55277 High 2026-09-08 Not applicable No public exploit In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55273 High 2026-09-08 Not applicable No public exploit In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55256 Medium 2026-09-08 Not applicable No public exploit In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49932 High 2026-09-08 Not applicable No public exploit In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49927 High 2026-09-08 Not applicable No public exploit In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
‹ prev page 3 of 92 next ›