CVE-2026-55366

CVE-2026-55366 affects the IP Multimedia Subsystem (IMS) in Android Pixel devices, as indicated by the reference to the September 2026 Pixel security bulletin. The vulnerability stems from a logic error that enables an authentication bypass , potentially leading to remote privilege escalation wit...

EUVD-2026-78954

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78952

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55359

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55359

CVE-2026-55359 is a permission bypass caused by a logic error in the GPCA subcomponent of Google Pixel devices. It allows a local escalation of privilege from a low-privilege user account to full device compromise, with no user interaction required. The Pixel Update Bulletin rates it as Critical ...

CVE-2026-55302

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79160

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55302

CVE-2026-55302 is a Critical -severity elevation of privilege vulnerability in the Bootloader of Google Pixel devices. The root cause is a permission bypass due to a logic error in multiple locations, allowing an attacker with System -level privileges to escalate further without user interaction....

CVE-2026-0194

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79155

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0194

CVE-2026-0194 is a local privilege escalation vulnerability in the Trusted Execution Environment (TEE) of Google Pixel devices, caused by an integer overflow that permits a permission bypass . No additional execution privileges or user interaction are required for exploitation. The Pixel Update B...

CVE-2026-0189

In acinitpolicy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79153

In acinitpolicy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0189

CVE-2026-0189 is a permission bypass in the ac_init_policy function of init.c within the Bootloader component of Google Pixel devices, caused by a logic error. It enables local escalation of privilege with no additional execution privileges and no user interaction required. The CVSS 3.1 score is ...

CVE-2026-0179

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0179

CVE-2026-0179 is a Critical -severity elevation-of-privilege vulnerability in the Bootloader of Google Pixel devices, caused by a missing permission check that allows a local attacker with System execution privileges to bypass permissions. No user interaction is required. The vulnerability is tra...

Authentication Bypass

Apache CXF is vulnerable to Authentication Bypass. The vulnerability is due to insufficient validation of required claims in self-issued OIDC ID tokens, including issuer, subject, audience, time, and subjwk binding, which allows an attacker to craft malicious tokens and bypass authentication when...

EUVD-2026-79144

Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...

Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis

1. Setup.exe – Cadenas de Privacidad, Controladores y Memoria El análisis de memoria con Process Hacker del dropper setup.exe revela que Lumma Stealer apunta a configuraciones de privacidad, instala controladores y gestiona memoria. Cadenas clave observadas: Privacy Camera – Intenta acceder o...

CVE-2020-1337

CVE-2020-1337 - 二进制植入（CVE-2020-1048 绕过） SafeBreach 的 Peleg Hadar @peleghd 和 Tomer Bar 因 CVE-2020-1048 而受到 Microsoft 致谢，该漏洞是 Windows 打印后台处理程序漏洞，可在 Windows 7 及更高版本上实现权限提升。 Alex Ionescu @aionescu 和 Yarden Shafir @yardenshafir 在其精彩的博客文章 PrintDemon: Print Spooler Privilege Escalation, Persistence &...