89144 matches found
CVE-2026-65768
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...
CVE-2026-65767
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...
CVE-2026-65767
Microsoft Teams for Android is affected by CVE-2026-65767 due to improper neutralization of input during web page generation (XSS). Attack requires network access with low privileges and no user interaction; an authorized attacker could spoof content. The CVSS v3.1 base score is 8.8 (HIGH). Affec...
CVE-2026-65767 Microsoft Teams for Android Spoofing Vulnerability
...
EUVD-2026-56774
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...
CVE-2026-65767 Microsoft Teams for Android Spoofing Vulnerability
...
EUVD-2026-56290
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...
MediaTek Tablet Vulnerabilities, August 2026 - Lenovo Support US
No description provided...
CVE-2026-70639
A flaw was found in llama.cpp. A null pointer dereference vulnerability exists in the LLaMA-Android JNI wrapper. This flaw allows an attacker to provide a malicious or corrupt model file, which causes the bench1model function to attempt to use an invalid memory address. This leads to a crash of t...
CVE-2026-19146
A flaw was found in Google Chrome on Android, specifically within its Graphics Processing Unit GPU component. A remote attacker, after compromising the browser's renderer process, could exploit an uninitialized memory vulnerability by tricking a user into visiting a specially crafted HTML page...
CVE-2026-19154
An use after free flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532941869...
CVE-2026-19141
A flaw was found in Chromium. This use-after-free vulnerability in the Resources component on Android could allow a remote attacker, who has already compromised the renderer process, to potentially escape the sandbox. This could be achieved by enticing a user to visit a specially crafted HTML pag...
CVE-2026-19143
A flaw was found in Google Chrome on Android. This vulnerability, related to insufficient validation of untrusted input in WebAPKs, allows a local attacker to perform a sandbox escape. By crafting and using a malicious file, an attacker can bypass security restrictions designed to isolate...
CVE-2026-19137
A flaw was found in Google Chrome on Android. This vulnerability, a use-after-free error in the WebGL component, could be exploited by a remote attacker. After compromising the renderer process, the attacker could craft a malicious HTML page to trigger the flaw. This could potentially lead to a...
Microsoft Teams for Android Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...
Microsoft Teams Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...
Exploit for CVE-2026-18907
CVE-2026-18907 — Path Traversal in TECNO Hi Browser Download H...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local p...
CVE-2026-67558: Authentication Bypass by Spoofing
The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match against the BLE advertisement name only, with no cryptographic peripheral authentication, MAC allowlist, or bonded-identity check. An attacker could capture live session token...
