CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-115403 NONE In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw send path uses the destination-table…
- CVE-2026-115215 NONE In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a session from its fixed session pool for the first…
- CVE-2026-58977 MEDIUM · 6.7 In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with…
- CVE-2026-58930 HIGH · 7.8 An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI. This allows the attacker to squat…
- CVE-2026-58927 MEDIUM · 6.7 The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`. Specifically, concurrent calls…
- CVE-2026-58926 LOW · 2.5 A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer thread is still using it.… Google
- CVE-2026-58925 HIGH · 7.8 The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized access to an `std::unordered_map`. An unprivileged application with access… Google
- CVE-2026-58924 HIGH · 7.5 The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `CameraDesc.metadata` byte array, which is parsed without… Google
- CVE-2026-58915 MEDIUM · 6.1 A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content and execute actions for…
- CVE-2026-58873 HIGH · 8.4 In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with…
- CVE-2026-49906 HIGH · 7.8 An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the `android.car.cluster.NAVIGATION` category and requesting navigation app focus. The privileged `ClusterHomeSample` application,…
- CVE-2026-49903 MEDIUM · 5.3 The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and `android.permission.PACKAGE_USAGE_STATS`, acts as a confused deputy. It allows attackers to write arbitrary values to `Settings.Global.OVERLAY_DISPLAY_DEVICES`, an…
- CVE-2026-29508 HIGH · 8.8 ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious…
- CVE-2026-16305 HIGH · 7.8 Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator…
- CVE-2026-116958 MEDIUM · 6.7 A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker…
- CVE-2026-116768 NONE CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting…
- CVE-2026-116767 NONE CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service.
- CVE-2026-116766 NONE CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial…
- CVE-2026-105476 HIGH · 8.8 Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.
- CVE-2026-105475 NONE Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.
- CVE-2026-97718 NONE CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause…
- CVE-2026-91901 LOW · 3.5 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with…
- CVE-2026-91900 MEDIUM · 5.8 Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated…
- CVE-2026-91899 MEDIUM · 6.4 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could…
- CVE-2026-91898 HIGH · 8.1 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could…
- CVE-2026-91897 MEDIUM · 6.4 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with local access could potentially exploit…
- CVE-2026-91896 LOW · 3.9 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially…
- CVE-2026-91895 HIGH · 7.1 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit…
- CVE-2026-91894 MEDIUM · 6.7 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit…
- CVE-2026-91893 HIGH · 7.8 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit…
- CVE-2026-86365 MEDIUM · 4.2 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability. A low privileged attacker with local access could potentially exploit…
- CVE-2026-59048 MEDIUM · 5.5 In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with no… Google
- CVE-2026-59047 MEDIUM · 6.2 In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of… Google
- CVE-2026-59046 MEDIUM · 6.2 In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local denial of service with no… Google
- CVE-2026-59045 HIGH · 7.4 In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional… Google
- CVE-2026-59044 HIGH · 8.4 In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with… Google
- CVE-2026-59043 HIGH · 7.4 In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no… Google
- CVE-2026-59042 HIGH · 7.4 In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no… Google
- CVE-2026-59031 MEDIUM · 6.2 In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial… Google
- CVE-2026-59028 HIGH · 8.4 In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no… Google
- CVE-2026-59022 MEDIUM · 5.5 In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information… Google
- CVE-2026-59021 MEDIUM · 6.2 In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User… Google
- CVE-2026-59020 MEDIUM · 5.9 In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service with… Google
- CVE-2026-59016 HIGH · 8.4 In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This could lead to local escalation of privilege with no… Google
- CVE-2026-59015 MEDIUM · 4.0 In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution… Google
- CVE-2026-59014 HIGH · 8.4 In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional… Google
- CVE-2026-59012 MEDIUM · 5.5 In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no… Google
- CVE-2026-59011 MEDIUM · 5.5 In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with… Google
- CVE-2026-59010 MEDIUM · 6.2 In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service… Google
- CVE-2026-59008 MEDIUM · 6.2 In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no… Google