CVE-2026-20520

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-20519

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

cve-2025-7771

CVE-2025-7771 — LPE con ThrottleStop.sys Prueba de concepto para CVE-2025-7771. ThrottleStop.sys expone dos manejadores IOCTL que permiten lectura/escritura arbitraria de memoria física sin control de acceso: cualquier proceso administrador puede leer o escribir en cualquier parte de la RAM físic...

PT-2026-106157

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in multiple locations allows for a possible out of bounds write, which is a condition where data is written outside the intended memory...

PT-2026-105990

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insufficient. Before executing a helper tool, the application only verifies that the file carries a valid Authenticode...

PT-2026-106165

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in the handle app val response function within btif rc.cc allows for potential code execution. This issue can lead to local escalation of...

PT-2026-106156

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An incorrect bounds check in the stpropnci process function within stpropnci.cc allows for a possible out-of-bounds write. This condition can be leveraged to...

PT-2026-106152

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A resource exhaustion issue in the qsort function within libufdt sysdeps vendor.c can lead to an out-of-bounds write. This condition allows for local escalation ...

CVE-2026-58841: Improper Privilege Management

In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106079

Plane is an open-source project management tool. Prior to 1.4.0, the GraphQL joinProject mutation lets any workspace member add themselves to any project in that workspace including network=0 secret/private projects they were never invited to and grants them a full Member role read + write. The...

PT-2026-104686

Name of the Vulnerable Software and Affected Versions MediaTek MT2716 affected versions not specified Description A missing bounds check in the Modem component allows an out-of-bounds write. This issue can lead to remote escalation of privilege if a User Equipment UE connects to a rogue base...

PT-2026-106145

Name of the Vulnerable Software and Affected Versions WifiPermissionsUtil.java affected versions not specified Description A missing permission check in the isSystem function of WifiPermissionsUtil.java allows for a possible sandbox escape. This issue can lead to local escalation of privilege...

PT-2026-104689

Name of the Vulnerable Software and Affected Versions battery affected versions not specified Description A missing bounds check in the battery component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This can lead to local...

PT-2026-104695

Name of the Vulnerable Software and Affected Versions aidl affected versions not specified Description A missing permission check in aidl allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it requires no user...

PT-2026-104697

Name of the Vulnerable Software and Affected Versions Android AIDL affected versions not specified Description A memory corruption issue exists in aidl caused by a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This flaw could allow a...

PT-2026-104681

Name of the Vulnerable Software and Affected Versions Video HAL affected versions not specified Description A missing bounds check in Video HAL allows for a local escalation of privilege. This issue can be exploited without requiring user interaction or additional execution privileges...

CVE-2026-45524: Missing Authorization

In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55286: Improper Restriction of Operations within the Bounds of a Memory Buffer

In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49885: Integer Overflow or Wraparound

In rwt4tupdatefile of rwt4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49933: Access of Uninitialized Pointer

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...