Overview 4,052 matches · 3 in Waratek scope · 0 protected · 15 exploited · 13 CISA KEV · 34 public PoC · 2 EPSS ≥ 0.5
4,052matches
3in Waratek scope0.1%
0protected0.0%
15exploited0.4%
13CISA KEV0.3%
34public PoC0.8%
2EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
3
0.1%
Outside Waratek scope
3
0.1%
Not applicable
4,046
99.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
4,052
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 1,066 / year
20081
Not applicable1
Medium1
not blocked1
Working exploit published1
20095
Not applicable5
Medium5
not blocked5
No public exploit5
20100
20117
Not applicable7
Medium7
not blocked7
Working exploit published3
No public exploit4
201214
Not applicable14
Medium14
not blocked14
Proof of concept only1
No public exploit13
20135
Not applicable5
Medium5
not blocked5
No public exploit5
201417
Not applicable17
Medium17
not blocked17
Exploited1
Working exploit published1
No public exploit15
201533
Not applicable33
Medium33
not blocked33
Forecast only1
No public exploit32
2016145
Outside Waratek scope1
Not applicable144
Medium145
not blocked145
Working exploit published3
Proof of concept only1
No public exploit141
2017190
Not applicable190
Medium190
not blocked190
Working exploit published2
Proof of concept only2
No public exploit186
201888
No exploit published1
Not applicable87
Medium88
not blocked88
Exploited1
Working exploit published2
Proof of concept only1
No public exploit84
2019217
Not applicable217
Medium217
not blocked217
Proof of concept only1
No public exploit216
2020394
No exploit published1
Outside Waratek scope1
Not applicable392
Medium394
not blocked394
Working exploit published2
Proof of concept only3
No public exploit389
2021356
Outside Waratek scope1
Not applicable355
Medium356
not blocked356
Exploited8
No public exploit348
2022656
No exploit published1
Not applicable655
Medium656
not blocked656
Proof of concept only3
No public exploit653
20231,066
Not applicable1,066
Medium1,066
not blocked1,066
Exploited2
Proof of concept only6
No public exploit1,058
2024346
Not applicable346
Medium346
not blocked346
Exploited2
No public exploit344
2025254
Not applicable254
Medium254
not blocked254
Exploited1
Proof of concept only5
No public exploit248
2026258
Not applicable258
Medium258
not blocked258
No public exploit258
2008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-59048 | Medium | 2026-11-02 | Not applicable | No public exploit | In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59047 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59046 | Medium | 2026-11-02 | Not applicable | No public exploit | In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59031 | Medium | 2026-11-02 | Not applicable | No public exploit | In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59022 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59021 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59020 | Medium | 2026-11-02 | Not applicable | No public exploit | In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59015 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59012 | Medium | 2026-11-02 | Not applicable | No public exploit | In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59011 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59010 | Medium | 2026-11-02 | Not applicable | No public exploit | In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59008 | Medium | 2026-11-02 | Not applicable | No public exploit | In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59007 | Medium | 2026-11-02 | Not applicable | No public exploit | In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59006 | Medium | 2026-11-02 | Not applicable | No public exploit | In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. |
| CVE-2026-59003 | Medium | 2026-11-02 | Not applicable | No public exploit | In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59002 | Medium | 2026-11-02 | Not applicable | No public exploit | In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-59001 | Medium | 2026-11-02 | Not applicable | No public exploit | In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58997 | Medium | 2026-11-02 | Not applicable | No public exploit | In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58990 | Medium | 2026-11-02 | Not applicable | No public exploit | In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58988 | Medium | 2026-11-02 | Not applicable | No public exploit | In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58985 | Medium | 2026-11-02 | Not applicable | No public exploit | In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58978 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58977 | Medium | 2026-11-02 | Not applicable | No public exploit | In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58976 | Medium | 2026-11-02 | Not applicable | No public exploit | In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58971 | Medium | 2026-11-02 | Not applicable | No public exploit | In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58969 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58955 | Medium | 2026-11-02 | Not applicable | No public exploit | In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58953 | Medium | 2026-11-02 | Not applicable | No public exploit | In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58951 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58945 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58937 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58933 | Medium | 2026-11-02 | Not applicable | No public exploit | In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58927 | Medium | 2026-11-02 | Not applicable | No public exploit | The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`. Specifically, concurrent calls from a privileged UID (e.g., `AID_AUTOMOTIVE_EVS`) can cause a torn `weak_ptr` state, leading to a virtual call through a freed object's vtable at `cameraObj->getCameraInfo(&desc)`. This allows for potential arbitrary code execution within the `hal_evs_default` process. |
| CVE-2026-58915 | Medium | 2026-11-02 | Not applicable | No public exploit | A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content and execute actions for a secure passenger user (User N) without authenticating. This bypasses the PassengerKeyguard because the HUN system only checks the global keyguard state, which is tied to the driver's unlocked display, and the PassengerKeyguard implementation fails to suppress HUNs or intercept action PendingIntents. Consequently, private notification data is disclosed, and user-N actions are executed without credential verification. |
| CVE-2026-58877 | Medium | 2026-11-02 | Not applicable | No public exploit | In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58875 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58870 | Medium | 2026-11-02 | Not applicable | No public exploit | In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58838 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58821 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58817 | Medium | 2026-11-02 | Not applicable | No public exploit | In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-55292 | Medium | 2026-11-02 | Not applicable | No public exploit | In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-55272 | Medium | 2026-11-02 | Not applicable | No public exploit | In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-55264 | Medium | 2026-11-02 | Not applicable | No public exploit | In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-49935 | Medium | 2026-11-02 | Not applicable | No public exploit | In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-49924 | Medium | 2026-11-02 | Not applicable | No public exploit | In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-49912 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-49903 | Medium | 2026-11-02 | Not applicable | No public exploit | The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and `android.permission.PACKAGE_USAGE_STATS`, acts as a confused deputy. It allows attackers to write arbitrary values to `Settings.Global.OVERLAY_DISPLAY_DEVICES`, an operation normally requiring `android.permission.WRITE_SECURE_SETTINGS`, enabling persistent creation of system overlay displays and injection of key events into the cluster UI. |
| CVE-2026-28645 | Medium | 2026-11-02 | Not applicable | No public exploit | In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-28643 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-28632 | Medium | 2026-11-02 | Not applicable | No public exploit | In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-28621 | Medium | 2026-11-02 | Not applicable | No public exploit | In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58834 | Medium | 2026-10-05 | Not applicable | No public exploit | In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-55265 | Medium | 2026-10-05 | Not applicable | No public exploit | In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-28667 | Medium | 2026-10-05 | Not applicable | No public exploit | In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58773 | Medium | 2026-09-15 | Not applicable | No public exploit | In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58767 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58765 | Medium | 2026-09-15 | Not applicable | No public exploit | In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58755 | Medium | 2026-09-15 | Not applicable | No public exploit | In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58751 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58747 | Medium | 2026-09-15 | Not applicable | No public exploit | In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58739 | Medium | 2026-09-15 | Not applicable | No public exploit | In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58731 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58726 | Medium | 2026-09-15 | Not applicable | No public exploit | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58721 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58718 | Medium | 2026-09-15 | Not applicable | No public exploit | In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58716 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-58698 | Medium | 2026-09-15 | Not applicable | No public exploit | In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-57042 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-57035 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-57006 | Medium | 2026-09-15 | Not applicable | No public exploit | In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56992 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56989 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56988 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56979 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56975 | Medium | 2026-09-15 | Not applicable | No public exploit | In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56973 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56972 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56964 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56958 | Medium | 2026-09-15 | Not applicable | No public exploit | In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56950 | Medium | 2026-09-15 | Not applicable | No public exploit | In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56932 | Medium | 2026-09-15 | Not applicable | No public exploit | In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56923 | Medium | 2026-09-15 | Not applicable | No public exploit | In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56922 | Medium | 2026-09-15 | Not applicable | No public exploit | In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56915 | Medium | 2026-09-15 | Not applicable | No public exploit | In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56907 | Medium | 2026-09-15 | Not applicable | No public exploit | In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56892 | Medium | 2026-09-15 | Not applicable | No public exploit | In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56889 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56888 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-56879 | Medium | 2026-09-15 | Not applicable | No public exploit | In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-55365 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-55332 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-55317 | Medium | 2026-09-15 | Not applicable | No public exploit | In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-55304 | Medium | 2026-09-15 | Not applicable | No public exploit | In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-55302 | Medium | 2026-09-15 | Not applicable | No public exploit | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-0197 | Medium | 2026-09-15 | Not applicable | No public exploit | In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-0192 | Medium | 2026-09-15 | Not applicable | No public exploit | In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-0187 | Medium | 2026-09-15 | Not applicable | No public exploit | In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-0186 | Medium | 2026-09-15 | Not applicable | No public exploit | In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-0183 | Medium | 2026-09-15 | Not applicable | No public exploit | In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. |
| CVE-2026-0179 | Medium | 2026-09-15 | Not applicable | No public exploit | In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. |