EUVD-2026-122673

In hasbootedsuccessfully of sysstatesetupotpta.c, there is a possible way to trigger a permanent denial of service via premature anti-rollback fuse updates due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not need...

EUVD-2026-122783

In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via exported broadcast receivers due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...

EUVD-2026-122809

An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized RIP route updates accepted by the device. Successful exploitation requires that RIPv2 MD5 authentication is configured on the affected interface. An attacker who can inject crafted RIPv2...

EUVD-2026-121605

Unintended proxy or intermediary 'confused deputy' in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-59636

In hasbootedsuccessfully of sysstatesetupotpta.c, there is a possible way to trigger a permanent denial of service via premature anti-rollback fuse updates due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not need...

CVE-2026-58796

In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via exported broadcast receivers due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...

CVE-2026-121288

An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication to have unauthorized RIP route updates accepted by the affected device. This vulnerability requires that RIPv2 MD5 authentication is configured on the interface. By injecting crafted RIPv2 packets, an attacke...

CVE-2026-59636

A logic error in the has_booted_successfully function of sys_state_setup_otp_ta.c can trigger premature anti-rollback fuse updates. This vulnerability leads to a permanent denial of service (DoS) . The impact is a local DoS that requires no additional execution privileges or user interaction. No ...

CVE-2026-58796

Multiple functions within AndroidManifest.xml on Android are vulnerable to unauthorized firmware updates because of a missing permission check on exported broadcast receivers. This flaw allows for local escalation of privilege without requiring additional execution privileges or user interaction....

CVE-2026-112989

Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-112989

Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

EUVD-2026-121912

Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-88235

Unintended proxy or intermediary 'confused deputy' in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-104619

A flaw was found in PackageKit. This vulnerability allows a local, unprivileged user to achieve privilege escalation by rolling back installed security updates through the Zypp backend. By downgrading system packages to earlier vulnerable versions, an attacker can reintroduce and exploit previous...

RedCloud-OS

⚠️ RedCloud OS Project Moved 🚚 This project has been moved to a new location: https://github.com/RedCloudOS 👉 Check our website for more info: https://redcloud.training/ This repository is now archived and will not receive updates...

October 13, 2026—KB5127646 (OS Build 28000.3231)

October 13, 2026—KB5127646 OS Build 28000.3231 Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5127646 includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release. Visit the...

Servicing Stack Updates Elevation of Privilege Vulnerability

Unintended proxy or intermediary 'confused deputy' in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

September 8, 2026—KB5124008 (OS Builds 26200.9445 and 26100.9445)

September 8, 2026—KB5124008 OS Builds 26200.9445 and 26100.9445 Applies To Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions Want a quick overview?: Watch the Windows 11 release note video for this update. --- Announcements and messages This section provides key...

October 13, 2026—KB5127648 (OS Builds 26300.9711, 26200.9711 and 26100.9711)

October 13, 2026—KB5127648 OS Builds 26300.9711, 26200.9711 and 26100.9711 Applies To Windows 11 version 26H2, all editions Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions Want a quick overview?: Watch the Windows 11 release note video for this update. --- Announcement...

September 8, 2026—KB5122882 (OS Build 20348.5622)

September 8, 2026—KB5122882 OS Build 20348.5622 Applies To Windows Server 2022 This cumulative update for Windows Server 2022 KB5122882, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Windows release healt...