3188 matches found
PT-2026-4699
Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description Improper input validation in multiple functions of AccessibilityManagerService.java can lead to a persistent local denial of service. This issue does not require additional executio...
PT-2026-4694
Name of the Vulnerable Software and Affected Versions Settings.java affected versions not specified Description A logic error in the enableSystemPackageLPw function within Settings.java may prevent location access from functioning correctly. This could lead to local escalation of privilege withou...
PT-2026-4689
In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
PT-2026-4685
In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-4695
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-4690
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A permissions bypass in the Framework component allows for the resetting of user-selected permission selections in multiple locations. This flaw enables a local escalation of privilege withou...
CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added a critical security flaw affecting Broadcom VMware vCenter Server that was patched in June 2024 to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerability ...
January 24, 2026—KB5078129 (OS Builds 19045.6812 and 19044.6812) Out-of-band
None None...
EuskalHack Security Congress IX Call for Papers
EuskalHack Security Congress ninth edition is a new proposal from the EuskalHack Computer Security Association, with the aim to promote the community growth and the culture in the digital security field. As usual, in this new edition proximity to our public and technical quality will be our...
January 13, 2026—KB5073450 (OS Build 25398.2092)
None None...
January 13, 2026—KB5073695 (Monthly Rollup)
None None...
January 13, 2026—KB5073722 (OS Build 14393.8783)
None None...
January 13, 2026—KB5073723 (OS Build 17763.8276)
None None...
CVE-2018-19925
An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. It has SQL injection via the member/memberorder.php type parameter, related to the Ostate parameter...
CVE-2017-18666
An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.x software. Applications can send arbitrary premium SMS messages. The Samsung ID is SVE-2017-8701 June 2017...
Apple macOS Tahoe Underchecked Vulnerability (CNVD-2025-3114612)
Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from an undercheck vulnerability that can be exploited by an attacker to cause an application t...
November 11, 2025—KB5068865 (OS Build 22631.6199)
None None...
October 14, 2025—KB5066793 (OS Builds 22621.6060 and 22631.6060)
None None...