PT-2026-92368

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92348

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow exists in the gf ta test set config function within the gf ta test.c file due to a logic error. This flaw allows for local escalation of privilege without...

PT-2026-91920

The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an existing username, the system responds with an error message that explicitly indicates the username is already in use...

PT-2026-92329

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code across multiple locations allows for a local escalation of privilege. This issue enables an attacker to gain System execution privileg...

PT-2026-92308

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description A logic error in the code allows for possible information disclosure. This flaw could be leveraged to achieve remote code execution without requiring additional execution privileges or...

PT-2026-92293

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, granting System execution...

PT-2026-92307

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the enable segment function within the remap.c file allows for a permission bypass. This flaw enables local escalation of privilege without...

PT-2026-92324

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This issue could...

PT-2026-92369

In smmu install nested ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92372

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

ROS-20260915-73-0148

The vulnerabilities of the functions xfsreflinkfillcowhole and xfsreflinkfilldelalloc in the fs/xfs/xfsreflink.c module of the Linux operating system’s file system are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise...

CVE-2026-58767: Protection Mechanism Failure

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55304: Protection Mechanism Failure

In addrremapaddressmap of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58755: Protection Mechanism Failure

In smmuinstallnestedste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92355

Name of the Vulnerable Software and Affected Versions Google Pixel versions 6 through 11, Pixel Tablet, and Pixel Fold affected versions prior to security patch level 2026-09-05 Description A high-severity zero-click issue exists in the Cellular Modem component of Google Pixel devices due to a...

CVE-2026-0197: Exposure of Sensitive Information to an Unauthorized Actor

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-19872

A flaw was found in HTML::FormHandler. A remote attacker could exploit this vulnerability by submitting malicious input that is then rendered unescaped in error messages. This allows the attacker to execute arbitrary script code in the victim's browser, potentially leading to information disclosu...

CVE-2026-55102 hashi-vault-js: Vault token and secret values exposed in thrown errors

hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError, which rethrows the raw AxiosError while retaining AxiosError.config and the equivalent response configuration. These...

CVE-2026-55102 hashi-vault-js: Vault token and secret values exposed in thrown errors

hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError, which rethrows the raw AxiosError while retaining AxiosError.config and the equivalent response configuration. These...

OESA-2026-3871 perl-Net-DNS security update

Net :: DNS is a collection of Perl's Domain Name System resolvers. It allows programmers to perform DNS queries for gethostbyname and gethostbyaddr functions. Security Fixes: Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR...