EUVD-2026-79001

In appmicpollmsghandler of appmicipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58691

CVE-2026-58691 is a local escalation of privilege vulnerability in the GPCA subcomponent of Google Pixel devices, specifically in the FsmReleaseKey function of fsm.c . The root cause is improper input validation that permits a permission bypass. Exploitation requires only low privileges , no user...

CVE-2026-58691

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78999

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

CVE-2026-58678 is a Critical elevation-of-privilege (EoP) vulnerability in the Bootloader of supported Google Pixel devices. The root cause is a logic error that permits a permission bypass , enabling a local attacker with System execution privileges to escalate further without user interaction. ...

EUVD-2026-78996

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57042

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78995

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57042

CVE-2026-57042 affects Android Pixel devices (tracked as PUB-A-522373674 ). The vulnerability exists in multiple functions of DreamPickerReceiver.kt , where a confused deputy flaw permits a permission bypass , enabling local escalation of privilege with System execution privileges required and no...

CVE-2026-56992

CVE-2026-56992 is a permission bypass in the AP ROM component of Google Pixel devices, caused by a confused deputy flaw in multiple files. It enables local escalation of privilege with System execution privileges required and no user interaction needed. Google classifies the severity as Critical ...

CVE-2026-56992

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78988

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2009-0182

VUPlayer 2.49 本地缓冲区溢出导致任意代码执行 程序版本：VUPlayer 2.49 漏洞：导入.wax播放列表文件时发生本地缓冲区溢出，可能导致任意代码执行 利用方式：本地缓冲区溢出 CVE: CVE-2009-0182 VUPlayer2.49poc.py : 未绕过DEP保护 VUPlayer2.49pocbypassDEP.py : 使用ROP链绕过DEP保护 PoC视频：https://youtu.be/HgD7gOgiIFE 逐步创建DEP绕过视频：https://youtu.be/AsR8PFKK5Mw...

EUVD-2026-78984

In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78983

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

CVE-2026-56982 affects the VPU (Video Processing Unit) component on Android/Pixel devices, as referenced in the Android security bulletin dated 2026-09-01 (AOSP bug PUB-A-508716504 ). The root cause is a missing permission check , which enables a local privilege escalation requiring System execut...

CVE-2026-56979

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78982

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...