26112 matches found
CVE-2026-21104
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...
CVE-2026-21104
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...
CVE-2026-21100
CVE-2026-21100 is an improper access control vulnerability in Samsung's SystemUI component. A local attacker with low privileges can exploit this flaw to launch arbitrary activity on the device, potentially gaining high confidentiality and integrity impact without affecting availability (NVD CVSS...
CVE-2026-21099
Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information...
EUVD-2026-74639
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...
EUVD-2026-74634
Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...
CVE-2026-21091
Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21091
Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21091
CVE-2026-21091 is an out-of-bounds write vulnerability in libcodec2secevrcdec.so on Samsung mobile devices, prior to SMR Sep-2026 Release 1 . A local attacker with low privileges can write out-of-bounds memory. NVD rates this CVSS 3.1: 7.8 (HIGH) , while Samsung's CNA scores it CVSS 4.0: 4.8 (MED...
CVE-2026-21090
CVE-2026-21090 is an out-of-bounds write vulnerability in libsaviextractor.so on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . A local attacker with low privileges can write to out-of-bounds memory. NVD assigns a CVSS 3.1 score of 7.8 (HIGH) , while Samsung's CNA ra...
CVE-2026-21089
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21089
CVE-2026-21089 is an out-of-bounds memory write vulnerability in libsubextractor.so on Samsung mobile devices, caused by improper input validation when removing a style tag. A local attacker with low privileges can exploit it, potentially leading to high impact on confidentiality, integrity, and ...
EUVD-2026-74629
Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21088
CVE-2026-21088 is an improper input validation vulnerability in libsubextractor.so on Samsung mobile devices, triggered when loading a subtitle frame. The flaw allows a local attacker to perform an out-of-bounds memory write , potentially leading to high impact on confidentiality, integrity, and ...
CVE-2026-21087
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege...
EUVD-2026-74628
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege...
CVE-2026-87514
A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. This can be achieved by exploiting the flaw through a local program, leading to a complete compromise of the affected system...
kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...
