42374 matches found
CVE-2026-28655
In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28624
In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28631
In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28626
In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2026-28616
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28611
In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28603
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28572
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0065
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...
Maono Link local privilege escalation
RISK EVALUATION Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. 2. RECOMMENDED PRACTICES Update to 4.0.80. 3. DESCRIPTION Maono Link 3.8.13 MaonoAiServices Windows service...
CVE-2026-83981
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83978
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83954
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83955
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-81354
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-80093
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-78448
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-73020
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...