CVE-2026-118769

A flaw was found in Botan. An attacker can exploit an unchecked integer truncation in the C programming interface by supplying untrusted algorithm parameters that specify a variable-block-size cipher. This flaw causes the application to allocate an undersized memory buffer, resulting in heap memo...

EUVD-2026-115624

ReadyMedia formerly MiniDLNA versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length...

CVE-2026-29508 ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser

ReadyMedia formerly MiniDLNA versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used unvalidated to allocate a variable-length...

CVE-2026-29508

ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 are vulnerable to a stack-based buffer overflow within the DFF parser . The vulnerability occurs because the software fails to validate the PROP chunk size value in a crafted DFF audio file, which is then used to allocate a variable-leng...

CVE-2026-58927

A Use-After-Free (UAF) vulnerability exists in the EVS AIDL HAL on Google Android, caused by a data race on an unsynchronized std::weak_ptr within EvsEnumerator::openCamera(). Concurrent calls from a privileged UID (such as AID_AUTOMOTIVE_EVS) can cause a torn weak_ptr state, leading to a virtual...

CVE-2026-58927

The vulnerability is a Use-After-Free UAF in the EVS AIDL HAL, arising from a data race on an unsynchronized std::weakptr within EvsEnumerator::openCamera. Specifically, concurrent calls from a privileged UID e.g., AIDAUTOMOTIVEEVS can cause a torn weakptr state, leading to a virtual call through...

EUVD-2026-115621

The vulnerability is a Use-After-Free UAF in the EVS AIDL HAL, arising from a data race on an unsynchronized std::weakptr within EvsEnumerator::openCamera. Specifically, concurrent calls from a privileged UID e.g., AIDAUTOMOTIVEEVS can cause a torn weakptr state, leading to a virtual call through...

EUVD-2026-115619

The report details a heap Use-After-Free UAF vulnerability within the android.hardware.automotive.evs-default HAL service, stemming from unsynchronized access to an std::unorderedmap. An unprivileged application with access to the EVS manager can trigger this UAF by making concurrent calls to...

CVE-2026-58925

The report details a heap Use-After-Free UAF vulnerability within the android.hardware.automotive.evs-default HAL service, stemming from unsynchronized access to an std::unorderedmap. An unprivileged application with access to the EVS manager can trigger this UAF by making concurrent calls to...

CVE-2026-58925

A heap Use-After-Free (UAF) vulnerability exists within the android.hardware.automotive.evs-default HAL service. The root cause is unsynchronized access to an std::unordered_map. An unprivileged application with access to the EVS manager can trigger this vulnerability by making concurrent calls t...

What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

In this article 1. Classifying the vulnerability landscape 2. Vulnerabilities exploited in the wild 3. Where defenders should focus 1. Patching is slow, while exploitation is fast 2. Impact, exposure and where to focus 3. Next in line 4. How Microsoft Security helps defenders act 5. References 6...

CVE-2026-91897

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Denial of Service...

CVE-2026-91898

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of...

CVE-2026-91899

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution...

CVE-2026-91894

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege, Arbitrary Code Execution and Denial of Service...

CVE-2026-58936

In pngsettRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58876

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58868

In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58857

In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49934

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...