CVE-2026-55332

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55331

CVE-2026-55331 affects Google Pixel devices in the IP Multimedia Subsystem (Telephony subcomponent). The root cause is an out-of-bounds write due to an incorrect bounds check, which can lead to remote code execution with no additional privileges and no user interaction required. The vulnerability...

CVE-2026-55331

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78948

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55318

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78946

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55318

CVE-2026-55318 is a use-after-free vulnerability caused by a race condition in multiple locations within the IP Multimedia Subsystem (IMS) on Google Pixel devices . It enables remote code execution without requiring additional privileges or user interaction. The vulnerability is rated Critical in...

EUVD-2026-79160

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0187

CVE-2026-0187 is a local privilege escalation vulnerability in the GSA (Google Silicon Accelerator) component of Google Pixel devices, specifically in the function gsa_sw_pk_hash_compare in image-auth-srv.c. The root cause is a logic error that allows escalation to System execution privileges wit...

CVE-2026-0186

In acinitonesswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0186

CVE-2026-0186 is an elevation of privilege vulnerability in the Bootloader of Google Pixel devices, caused by a logic error in the ac_init_one_sswrp function within init.c. An attacker with System -level execution privileges can exploit this locally without user interaction to escalate to higher ...

CVE-2026-0179

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79147

In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0171

CVE-2026-0171 is an out-of-bounds write in the BigWave component of Google Pixel devices, caused by a logic error in the code. The vulnerability can lead to remote code execution (classified as EoP/High severity in the Pixel bulletin) with only low privileges required and no user interaction need...

CVE-2026-0171

In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79145

In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0159

In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0159

CVE-2026-0159 is a remote code execution vulnerability in the Cellular Modem of Google Pixel devices, caused by an out-of-bounds write due to a missing bounds check. It requires only low privileges , no user interaction, and is exploitable over the network (CVSS 3.1 base score 8.8 HIGH ). CISA's ...

CVE-2025-55182

CVE-2025-55182 React2Shell CVE-2025-55182 React RCE Test Program 🔒 CVE-2025-55182 Interactive RCE Scanner This script is a vulnerability verification tool targeting CVE-2025-55182, a critical remote code execution RCE vulnerability in React 19.x's React Server Components RSC . This tool determine...

CVE-2025-55182

CVE-2025-55182 — React Server Components Unauthenticated RCE Severity: Critical — CVSS 10.0 CWE: CWE-502 Deserialization of Untrusted Data Vendor: Meta Facebook Disclosed: December 3, 2025 Overview CVE-2025-55182 is a maximum-severity unauthenticated remote code execution RCE vulnerability in Rea...