2026

Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated

Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments vi

Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authentica

In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated ag

In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. T

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executio

In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion. This could lead to

In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow. This coul

In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due t

In Camera, there is a possible unauthorized way to access photos due to a missing permission check. This could lead to l

In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This could lead to remote i

In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check. This

In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. This could lead to rem

In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption. This cou

In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. This could

In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously expand

In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow. This could lead t

In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow.

In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This could lead to remote

In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer overf

In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missi

In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bou

In keymint, there is a possible Permission Bypass due to a logic error in the code. This could lead to local information

In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check. This cou

In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. This

In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation. This could

In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check. This could lead to

In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executio

In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This coul

In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use afte

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of serv

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution

In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic erro

In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due t

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code executio

In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to loca

In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to

In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could lead to remote informa

In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow. This could lead

In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory

In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execu

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to loc

OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authent

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-der

OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host environment sanitizer that all

OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers that accept unvalidate

OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pending token access to

OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses combined

OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows participants to match