2026

In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlie

Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploit

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious

An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files.

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode proc

In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission che

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a

In multiple locations, there is a possible way to reveal images across users due to improper input validation. This coul

In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in th

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when

In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead

In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to

In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass

In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in

In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalat

In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. Thi

In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic

In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This coul

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a

In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input va

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to mislea

In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missi

In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell u

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of priv

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to cert

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to mi

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused

In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to

In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loc

In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This

In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to lo

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initi

Memory corruption while processing IOCTL calls for escape operations.

Memory corruption while processing multiple IOCTL command for escape operations.

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memor

The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook handler

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an

NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A su

NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A su

Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privile

An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Ba

An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backu

A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and e

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Corte