CVE-2025-26428

In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-7323 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2023-26428

Attackers can successfully request arbitrary snippet IDs, including E-Mail signatures of other users within the same context. Signatures of other users could be read even though they are not explicitly shared. We improved permission handling when requesting snippets that are not explicitly shared...

CVE-2023-26428

CVE-2023-26428 affects Open-Xchange OX App Suite (OXAS-BACKEND). Affected component: snippet retrieval mechanism where attackers could request arbitrary snippet IDs, including other users’ email signatures within the same context, effectively reading non-shared content due to permission handling ...

CVE-2022-26428

creationtimestamp| type| source ---|---|--- 2022-08-01 18:17:08+00:00| seen| https://t.me/cibsecurity/47343...

CVE-2022-26428

CVE-2022-26428 describes a race condition in the MediaTek video codec that can cause memory corruption and local privilege escalation. The vulnerability is triggered without user interaction and requires local access with high privileges; the base CVSSv3.1 vector indicates Local attack, High atta...

CVE-2021-26428

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-26428

CVE-2021-26428 affects Microsoft Azure Sphere. Azure Sphere information disclosure vulnerability is tied to an input validation/data protection weakness in the Azure Sphere OS, enabling information disclosure with LOCAL access and no authentication required. The combined CVSS data indicates a MED...

CVE-2021-26428 Azure Sphere Information Disclosure Vulnerability

...