PT-2026-106156

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An incorrect bounds check in the stpropnci process function within stpropnci.cc allows for a possible out-of-bounds write. This condition can be leveraged to...

PT-2026-106139

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue enables local escalation of privilege without requiring additional...

PT-2026-104705

Name of the Vulnerable Software and Affected Versions vdec affected versions not specified Description A type confusion issue in vdec allows for an out-of-bounds write, which occurs when a program writes data past the end of a buffer. This can lead to local escalation of privilege if a malicious...

PT-2026-104689

Name of the Vulnerable Software and Affected Versions battery affected versions not specified Description A missing bounds check in the battery component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This can lead to local...

PT-2026-106141

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the shouldDisableUninstallButton function within ApplicationActionButtonsPreferenceController.java allows for a permission bypass. This flaw...

PT-2026-106142

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the updateState function of DeviceAdminAppsPreferenceController.java allows for a permission bypass. This issue enables local escalation of...

PT-2026-104693

Name of the Vulnerable Software and Affected Versions Display affected versions not specified Description An integer overflow in display allows for a local escalation of privilege. This occurs if a malicious actor has already obtained System privilege. Exploitation does not require user...

PT-2026-104707

Name of the Vulnerable Software and Affected Versions mtee affected versions not specified Description A type confusion issue exists in mtee, which may allow a local escalation of privilege. This occurs if a malicious actor has already obtained System privilege. Exploitation does not require user...

PT-2026-104697

Name of the Vulnerable Software and Affected Versions Android AIDL affected versions not specified Description A memory corruption issue exists in aidl caused by a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This flaw could allow a...

PT-2026-104702

Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description A memory corruption issue exists due to a use after free, which occurs when a program continues to use a pointer after it has been freed. This can lead to local escalation of privilege if a...

PT-2026-104684

Name of the Vulnerable Software and Affected Versions apu affected versions not specified Description Improper input validation in apu can lead to memory corruption, which may allow a local escalation of privilege without requiring additional execution privileges or user interaction...

CVE-2026-28647: Undefined Security Weakness

In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28648: Undefined Security Weakness

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20579: Out-of-bounds Write

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800...

CVE-2026-55286: Improper Restriction of Operations within the Bounds of a Memory Buffer

In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28641: Undefined Security Weakness

In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-58841: Improper Privilege Management

In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2017-14187_PoC_ARMv7

PoC de CVE-2017-14187 Prueba de concepto de escalada de privilegios local para FortiOS 5.6.0 a 5.6.2, 5.4.0 a 5.4.8, y por debajo de 5.2 Desencadenado por fnsysctl y USB por lo que se requiere acceso físico. Este PoC genera un shell root local explotando CVE-2017-14187. Informe Coreano Inglés TL;...

MSC-EvilTwin-Local-Privilege-Escalation

CVE-2025-26633 - Microsoft Management Console .msc EvilTwin Local Privilege Escalation PoC Zero-day at time of disclosure March 2025 – Actively exploited in the wild by Water Gamayun APT ONLY FOR AUTHORIZED SECURITY TESTING AND RESEARCH Vulnerability Details Exploit Title : Microsoft Management...

Copy-Fail-CVE-2026-31431-Lab

Copy Fail CVE-2026-31431 — Laboratorio de Reproducción y Detección de Exploit Este repositorio documenta la reproducción de extremo a extremo, la ingeniería de detección y la respuesta a incidentes para CVE-2026-31431 "Copy Fail" , una vulnerabilidad crítica de escalada de privilegios locales del...