CVE-2026-28662

CVE-2026-28662 is a heap buffer overflow in the p2p_process_prov_disc_bootstrap_req function of p2p_pd.c within the Android P2P (Wi-Fi Direct) stack . The out-of-bounds write can lead to remote code execution from an adjacent network with low privileges and no user interaction required. The vulne...

EUVD-2026-73985

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28653

CVE-2026-28653 is an integer overflow vulnerability in multiple functions of rw_t3t.cc , an Android media framework component responsible for T3T codec handling. The overflow leads to an out-of-bounds write , enabling local privilege escalation with no additional execution privileges or user inte...

CVE-2026-28653

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28639

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73980

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28639

CVE-2026-28639 is an out-of-bounds write vulnerability in rw_mfc_handle_read_op of rw_mfc.cc in the Android system framework, caused by a logic error. It enables local privilege escalation with no additional execution privileges and no user interaction. The CNA-assigned CVSS v3.1 score is 7.8 (HI...

EUVD-2026-73967

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

CVE-2026-28618 is a heap buffer overflow (OOB write) in the dec_frm_prepare function of oapv.c , part of the Android Media Framework . It can lead to remote code execution with no additional privileges and no user interaction required. The vulnerability is rated CVSS 8.8 (High) and classified as ...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73960

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

CVE-2026-28609 is an out-of-bounds write vulnerability in MatroskaExtractor.cpp , caused by improper casting during a read operation. It can lead to remote code execution with low privileges required and no user interaction needed, rated CVSS 8.8 (HIGH) . The vulnerability is tracked in the Andro...

CVE-2026-28583

CVE-2026-28583 is an out-of-bounds write in the validate_camera_metadata_structure function of camera_metadata.c (Android Camera HAL), caused by a logical error. It enables local privilege escalation with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (High) with ...

EUVD-2026-73947

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28583

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-83501

CVE-2026-83501 is an out-of-bounds read vulnerability in Windows Virtualization-Based Security (VBS) Enclave that allows a local, authorized attacker (low privileges) to disclose information without user interaction. The CVSS 3.1 score is 5.5 (Medium) , with high confidentiality impact but no int...

EUVD-2026-73920

Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

EUVD-2026-73919

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-85875

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...