SUSE CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

Chromium CVE-2026-87563: Origin validation error in Paint

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2026-92341

In acfw ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92282

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for an out-of-bounds write in multiple locations. This condition can be exploited to achieve remote code execution without...

CVE-2026-0189: Protection Mechanism Failure

In acinitpolicy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92287

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the ac init policy function within the init.c file allows for a permission bypass. This flaw enables local escalation of privilege without...

VulnCheck KEV: CVE-2026-58704

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges...

Alsa-lib Heap Buffer Overflow DoS

The vulnerability of the sndctlasciielemidparse function in the library for interacting with kernel audio drivers from the Alsa-lib library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-92347

Name of the Vulnerable Software and Affected Versions Bootloader affected versions not specified Description A logic error in the code allows a permission bypass, which could lead to local escalation of privilege. This issue requires System execution privileges and does not require user interacti...

PT-2026-92371

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92289

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description A logic error in the code allows for local information disclosure. Exploitation requires System execution privileges and does not require user interaction. Recommendations At the moment, there is...

PT-2026-92294

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the addr remap address map function within the remap.c file allows for a local escalation of privilege. An attacker can exploit this issue to ga...

PT-2026-92367

In smmu detach dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-91919

The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received during the OTP initiation process. This weakness can be exploited by an attacker to discover valid usernames within the system. The...

CVE-2026-58766: Protection Mechanism Failure

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92285

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the ac init one sswrp function within the init.c file allows for a local escalation of privilege. This issue enables an attacker to gain System...

CVE-2026-58704: Improper Authorization

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56973: Protection Mechanism Failure

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0187: Protection Mechanism Failure

In gsaswpkhashcompare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56882: Exposure of Sensitive Information to an Unauthorized Actor

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...