CVE-2026-57042

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78995

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57042

CVE-2026-57042 affects Android Pixel devices (tracked as PUB-A-522373674 ). The vulnerability exists in multiple functions of DreamPickerReceiver.kt , where a confused deputy flaw permits a permission bypass , enabling local escalation of privilege with System execution privileges required and no...

CVE-2026-56992

CVE-2026-56992 is a permission bypass in the AP ROM component of Google Pixel devices, caused by a confused deputy flaw in multiple files. It enables local escalation of privilege with System execution privileges required and no user interaction needed. Google classifies the severity as Critical ...

CVE-2026-56992

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78988

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2009-0182

VUPlayer 2.49 本地缓冲区溢出导致任意代码执行 程序版本：VUPlayer 2.49 漏洞：导入.wax播放列表文件时发生本地缓冲区溢出，可能导致任意代码执行 利用方式：本地缓冲区溢出 CVE: CVE-2009-0182 VUPlayer2.49poc.py : 未绕过DEP保护 VUPlayer2.49pocbypassDEP.py : 使用ROP链绕过DEP保护 PoC视频：https://youtu.be/HgD7gOgiIFE 逐步创建DEP绕过视频：https://youtu.be/AsR8PFKK5Mw...

EUVD-2026-78984

In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78983

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

CVE-2026-56982 affects the VPU (Video Processing Unit) component on Android/Pixel devices, as referenced in the Android security bulletin dated 2026-09-01 (AOSP bug PUB-A-508716504 ). The root cause is a missing permission check , which enables a local privilege escalation requiring System execut...

CVE-2026-56979

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78982

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56979

CVE-2026-56979 is a permission bypass in Android (referenced in the Pixel security bulletin for 2026-09-01) caused by a logic error in multiple code locations . An attacker with System execution privileges can achieve local escalation of privilege without user interaction. The vulnerability is ra...

CVE-2026-56970

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56970

CVE-2026-56970 is a permission bypass vulnerability in Android (Pixel) devices, caused by a missing permission check in multiple locations. It enables local escalation of privilege with no additional execution privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with impa...

EUVD-2026-78976

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

CVE-2026-56922 is a permission bypass in the CPM (Camera Processing Module) component of Google Pixel devices, caused by a confused deputy flaw. It enables local escalation of privilege with System execution privileges required and no user interaction needed. The Pixel Security Bulletin rates thi...

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78965

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...