CVE-2026-91898

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 are vulnerable to an Improper Verification of Cryptographic Signature (CWE-347). An unauthenticated attacker with adjacent network access could exploit this flaw to achieve Arbitrary Code Execution and Elevation of Privilege . Remed...

CVE-2026-58936

A use-after-free vulnerability exists in png_set_tRNS of pngset.c , which can cause memory corruption. This flaw could lead to remote code execution (RCE) without requiring additional execution privileges or user interaction. The vulnerability has been identified in Google Android systems, as con...

EUVD-2026-115383

In pngsettRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58936

In pngsettRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58876

Google Android is affected by a memory safety issue caused by a use-after-free in multiple locations. This vulnerability could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. While specific component details and remediation...

CVE-2026-58876

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-115602

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-115598

In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58868

In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58868

CVE-2026-58868 is a Critical heap buffer overflow vulnerability in Android's media decoding framework, specifically within the MediaImageDecoder component (file FrameDecoder.cpp). The root cause is a lack of validation when processing HEIF grid images , where inconsistent dimensions between the c...

EUVD-2026-115595

In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58857

A use-after-free vulnerability exists in the decrypt function of CryptoHalHidl.cpp within Google Android due to a race condition . This flaw could lead to remote code execution (RCE) without requiring additional execution privileges or user interaction. Security updates have been released for And...

CVE-2026-58857

In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49934

A vulnerability exists in Google Android due to improper input validation in multiple functions of MmiUtils.java . This flaw allows for USSD/MMI code execution , which could lead to a local escalation of privilege without requiring additional execution privileges. Exploitation requires user inter...

EUVD-2026-115564

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-49934

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Exploit for CVE-2026-98432

CVE-2026-98432 mitigation for Ubuntu An interim mitigation fo...

EUVD-2026-115544

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the getObjAttr function in all versions up to, and including, 3.5.54. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

Exploit for CVE-2026-98432

🔥 CVE-2026-98432 — Linux Kernel IPv4 Use-After-Free...

bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay

A flaw was found in BIND. This vulnerability may allow a remote attacker to achieve arbitrary code execution on the target server. An attacker who captures a valid User Datagram Protocol UDP message signed with Generic Security Service Transaction Signature GSS-TSIG can replay it while the...