CVE-2026-58876

Google Android is affected by a memory safety issue caused by a use-after-free in multiple locations. This vulnerability could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. While specific component details and remediation...

CVE-2026-58876

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-115602

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-115598

In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58868

In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58868

CVE-2026-58868 is a Critical heap buffer overflow vulnerability in Android's media decoding framework, specifically within the MediaImageDecoder component (file FrameDecoder.cpp). The root cause is a lack of validation when processing HEIF grid images , where inconsistent dimensions between the c...

EUVD-2026-115595

In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58857

In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58857

A use-after-free vulnerability exists in the decrypt function of CryptoHalHidl.cpp within Google Android due to a race condition . This flaw could lead to remote code execution (RCE) without requiring additional execution privileges or user interaction. Security updates have been released for And...

CVE-2026-49934

A vulnerability exists in Google Android due to improper input validation in multiple functions of MmiUtils.java . This flaw allows for USSD/MMI code execution , which could lead to a local escalation of privilege without requiring additional execution privileges. Exploitation requires user inter...

EUVD-2026-115564

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-49934

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Exploit for CVE-2026-98432

CVE-2026-98432 mitigation for Ubuntu An interim mitigation fo...

EUVD-2026-115544

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the getObjAttr function in all versions up to, and including, 3.5.54. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

Exploit for CVE-2026-98432

🔥 CVE-2026-98432 — Linux Kernel IPv4 Use-After-Free...

bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay

A flaw was found in BIND. This vulnerability may allow a remote attacker to achieve arbitrary code execution on the target server. An attacker who captures a valid User Datagram Protocol UDP message signed with Generic Security Service Transaction Signature GSS-TSIG can replay it while the...

Important: Red Hat Security Advisory: bind9.16 security update

An update for bind9.16 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-111183

A flaw was found in GStreamer. A remote attacker can achieve arbitrary code execution by sending specially crafted Real-time Transport Protocol RTP stream packets to applications using the rtpL16depay plugin. This issue occurs due to a lack of proper validation on the length of incoming payload...

CVE-2026-120432

A flaw was found in Netpbm. An integer overflow in the winicontopam utility occurs when processing icon or cursor files with excessively large dimensions. By tricking a user or system into processing a specially crafted file, an attacker could corrupt memory, potentially leading to arbitrary code...

CVE-2026-120436

A flaw was found in Netpbm's jbigtopnm conversion utility. An integer overflow occurs when calculating output buffer dimensions for multi-plane JBIG Joint Bi-level Image Experts Group images with large header sizes, resulting in an undersized memory allocation. By convincing a user to process a...