CVE-2026-27781 kernel_liteos_a has an integer overflow vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS...

CVE-2026-25110 Sensors_medical_sensor has a NULL pointer dereference vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS...

EUVD-2026-30824

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS...

CVE-2026-25110

CVE-2026-25110 affects OpenHarmony v6.0 and earlier, where the Sensors_medical_sensor contains a NULL pointer dereference vulnerability that can be triggered locally to cause a denial of service. The description indicates a local attacker can induce a crash/DOS, but the connected documents do not...

CVE-2026-25110

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS...

PT-2026-41820

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS...

PT-2026-41947

Name of the Vulnerable Software and Affected Versions Motorola Factory Test affected versions not specified Description An improper authentication issue exists in the com.motorola.motocit component. The application contains a reference to a writable file descriptor in external storage. This allow...

PT-2026-41816

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered...

PT-2026-41886

Name of the Vulnerable Software and Affected Versions Qt Qt Framework Unix affected versions not specified Description An Uncontrolled Search Path Element issue in the OpenSSL TLS backend of Qt Network qtbase allows a local attacker to load a rogue CA certificate as a trusted system authority. Th...

PT-2026-41819

in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak...

PT-2026-41817

in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak...

PT-2026-41822

Name of the Vulnerable Software and Affected Versions OpenHarmony versions 6.0 and earlier Description A local attacker can cause a Denial of Service DoS, which is a condition where a system becomes unavailable to its intended users. Recommendations At the moment, there is no information about a...

PT-2026-41823

Name of the Vulnerable Software and Affected Versions OpenHarmony versions 6.0 and earlier Description A local attacker can cause a Denial of Service DoS, a condition where a system becomes unavailable to its intended users. Recommendations At the moment, there is no information about a newer...

PT-2026-41815

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS...

PT-2026-41821

Name of the Vulnerable Software and Affected Versions OpenHarmony versions 6.0 and earlier Description An issue in the system allows a local attacker to achieve arbitrary code execution, which is the ability to run any command or software of the attacker's choice on the target machine...

CVE-2026-47092

Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version...

EUVD-2026-30802

Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version...

CVE-2026-47092

CVE-2026-47092 : Claude HUD 0.0.12 contains a local command-injection via the COMSPEC environment variable. An attacker can set COMSPEC to an arbitrary binary path before Claude HUD performs its version check, causing execFile() to run the attacker-supplied executable with cmd.exe arguments, lead...

CVE-2026-32848

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodevop within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems. Attackers can exploit...

CVE-2026-32848

CVE-2026-32848 concerns NetBSD: a race condition in the cryptodev_op() function of the opencrypto subsystem that can, under SMP, be triggered by concurrently issuing CIOCCRYPT operations on the same session identifier. The vulnerability allows a local attacker to exploit mutable per-operation sta...