EUVD-2026-78957

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56882

CVE-2026-56882 is a remote code execution vulnerability in the Cellular Modem (Telephony) component of Google Pixel devices, caused by a logic error in the code. The flaw enables information disclosure that can escalate to RCE without requiring additional privileges or user interaction. The vulne...

EUVD-2026-78950

In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-55343

In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-55343

CVE-2026-55343 is a critical remote code execution vulnerability in the libpixelimsmedia component of Google Pixel devices. The flaw is an out-of-bounds write in the decodeAmr function of ImsMediaAudioPlayer.cpp, caused by a missing bounds check during AMR audio decoding. Successful exploitation ...

CVE-2026-55331

CVE-2026-55331 is an out-of-bounds write in the IP Multimedia Subsystem (classified under the Telephony subcomponent) of Google Pixel devices, caused by an incorrect bounds check. The flaw can lead to remote code execution with no additional execution privileges and no user interaction required. ...

CVE-2026-55331

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78948

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55318

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78946

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55318

CVE-2026-55318 is a critical use-after-free vulnerability in the IP Multimedia Subsystem (IMS) component of Google Pixel devices , caused by a race condition in multiple locations. The flaw enables remote code execution without additional execution privileges or user interaction. It is classified...

EUVD-2026-79147

In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0171

CVE-2026-0171 affects the BigWave component in Google Pixel devices. The root cause is a possible out-of-bounds write due to a logic error in multiple locations in the code. Per the description, this could lead to remote code execution with no additional execution privileges required and no user ...

CVE-2026-0171

In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0159

CVE-2026-0159 is a High-severity remote code execution (RCE) vulnerability in the Cellular Modem of Google Pixel devices, caused by an out-of-bounds write due to a missing bounds check. No additional execution privileges or user interaction are required for exploitation. The fix is included in th...

CVE-2026-0159

In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79145

In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-55182

CVE-2025-55182 React2Shell CVE-2025-55182 React RCE 测试程序 🔒 CVE-2025-55182 交互式 RCE 扫描器 该脚本是一款漏洞验证工具 ，针对 React 19.x 的 React Server Components RSC 中存在的严重远程代码执行（RCE）漏洞 CVE-2025-55182。 本工具可判断真实服务器上是否存在该漏洞，并可根据选项执行命令 、记录日志 ，也可以通过两阶段 RCE 方式（moduleload）进行测试。 ⚠️ 本工具仅限在封闭的测试环境 中用于安全审计及漏洞验证目的 。 📋 React2Shell...

CVE-2025-55182

CVE-2025-55182 — React Server Components 未认证远程代码执行 严重性： 严重 — CVSS 10.0 CWE： CWE-502（不受信任数据的反序列化） 供应商： Meta（Facebook） 披露日期： 2025年12月3日 概述 CVE-2025-55182 是 React Server Components RSC 中的一个最高严重性未认证远程代码执行 RCE 漏洞，被称为 React2Shell 。该漏洞存在于 React 如何解码通过 Flight 协议 发送到 React Server Function...

CVE-2026-81236

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...