2026

In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confuse

In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain perm

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a c

In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass

In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This co

In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to

In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds ch

In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could l

In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper

In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing fil

In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead

In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the co

In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to versi

OpenClaw versions prior to 2026.2.14 contain an arbitrary file read vulnerability in the exec-approvals allowlist valida

OpenClaw versions 2026.1.5 prior to 2026.2.12 fail to enforce mandatory authentication on the /agent/act browser-control

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to exe

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validatio

Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etc_ro/shado

Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/sh

In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy. Th

In mfc_dec_dqbuf of mfc_dec_v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could

In oobconfig, there is a possible bypass of carrier restrictions due to a logic error. This could lead to local escalati

In multiple places, there is a possible out of bounds write due to memory corruption. This could lead to remote code exe

In EfwApTransport::ProcessRxRing of efw_ap_transport.cc, there is a possible out of bounds write due to a missing bounds

Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allow

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attack

Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local us

Tina is a headless content management system. Prior to 2.1.8, the TinaCMS CLI development server exposes media endpoints

arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component. W

TuneClone 2.20 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers t

DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local a

Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers t

Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbitrary

JetAudio jetCast Server 2.0 contains a stack-based buffer overflow vulnerability in the Log Directory configuration fiel

MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attackers to e

Lavavo CD Ripper 4.20 contains a structured exception handling (SEH) buffer overflow vulnerability that allows local att

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local atta

cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating

River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows lo

FlexHEX 2.71 contains a local buffer overflow vulnerability in the Stream Name field that allows local attackers to exec

AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functional

AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attac

AIDA64 Extreme 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attack

Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitra

X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the pro

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.5, macOS So