163595 matches found
CVE-2026-21114
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
EUVD-2026-97189
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...
CVE-2026-21125
A vulnerability exists in libsimba.heifdec.media.samsung.so due to improper input validation when parsing sheifd . This flaw allows local attackers to potentially achieve arbitrary code execution . The issue affects devices running versions prior to the SMR Oct-2026 Release 1 . Samsung has addres...
EUVD-2026-97188
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...
CVE-2026-21124
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...
EUVD-2026-97186
Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
CVE-2026-21122
Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
CVE-2026-21122
An out-of-bounds write vulnerability exists in libsamsungtts.so on Samsung Mobile devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to execute arbitrary code . Exploitation can occur locally, and the vulnerability is categorized under a broader set of Android security...
EUVD-2026-97184
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...
CVE-2026-21120
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...
EUVD-2026-97178
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
CVE-2026-21114
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
CVE-2026-21114
An out-of-bounds write vulnerability exists in libsmkvextractor.so on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to execute arbitrary code on the affected system. While the NCSC advisory notes broad vulnerabilities in Android, this specific CVE is identified as...
flatpak: Flatpak: Arbitrary code execution via missing symlink protection
A flaw was found in Flatpak. A malicious sandboxed application can exploit missing symlink protection during the creation and bind-mounting of app data directories. By manipulating attacker-controlled path components, a malicious symlink can redirect these directories to arbitrary locations on th...
Important: Red Hat Security Advisory: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
emacs: emacs: Command injection via crafted filenames in TRAMP
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...
emacs: emacs: Command injection via crafted filenames in TRAMP
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...
Important: Red Hat Security Advisory: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
flatpak: Flatpak: Arbitrary code execution via missing symlink protection
A flaw was found in Flatpak. A malicious sandboxed application can exploit missing symlink protection during the creation and bind-mounting of app data directories. By manipulating attacker-controlled path components, a malicious symlink can redirect these directories to arbitrary locations on th...
USN-8912-1 libdbi-perl vulnerabilities
Harsh Raj Singhania discovered that the Perl DBI module did not correctly validate certain attributes. An attacker could possibly use this issue to execute arbitrary code. CVE-2026-78030 Harsh Raj Singhania discovered that the Perl DBI module did not correctly handle certain string operations. An...