PT-2026-92361

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92288

Name of the Vulnerable Software and Affected Versions Bootloader affected versions not specified Description A missing permission check in the Bootloader allows for a local escalation of privilege. This issue enables an attacker to obtain System execution privileges without requiring any user...

PT-2026-92334

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description A missing permission check in VPU allows for a permission bypass. This issue can lead to local escalation of privilege, granting the attacker System execution privileges without requiring user...

PT-2026-92335

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A type confusion issue exists in multiple files, allowing an attacker to obtain signatures. This flaw enables local escalation of privilege without requiring...

PT-2026-92336

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds read occurs in multiple files due to type confusion, which is a situation where a program accesses a resource using a type that is different fro...

CVE-2026-92180: Uncontrolled Search Path Element

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

PT-2026-92365

In platform msg handler init of default msg handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92345

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

PT-2026-92353

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in the Vp9DecEndOfStream function within vp9hwd output.cc allows for a possible out-of-bounds read. This condition can lead to local...

PT-2026-92347

Name of the Vulnerable Software and Affected Versions Bootloader affected versions not specified Description A logic error in the code allows a permission bypass, which could lead to local escalation of privilege. This issue requires System execution privileges and does not require user interacti...

PT-2026-92348

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow exists in the gf ta test set config function within the gf ta test.c file due to a logic error. This flaw allows for local escalation of privilege without...

PT-2026-92346

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description Multiple functions within DreamPickerReceiver.kt are susceptible to a permission bypass caused by a confused deputy. A confused deputy is a security issue where a privileged entity is...

PT-2026-92338

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

PT-2026-92292

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in the Wave6VpuDecFlush function within wave6.c allows for an out-of-bounds write. This condition can be exploited to achieve local...

PT-2026-92293

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, granting System execution...

PT-2026-92286

In gsa sw pk hash compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-93099

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description A flaw in the Core component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to a complete Denial of Service...

PT-2026-92318

Name of the Vulnerable Software and Affected Versions Trusted Execution Environment affected versions not specified Description Improper input validation in the Trusted Execution Environment can lead to memory corruption. This issue allows for local escalation of privilege, requiring System...

PT-2026-92344

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the phNxpNciHal ext process nfc init rsp function within phNxpNciHal ext.cc allows for a possible out-of-bounds write. This condition c...

PT-2026-92739

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with access to the execution infrastructure to compromise the system...