26729 matches found
CVE-2026-58820
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...
CVE-2026-28644
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28626
In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
EUVD-2026-73972
In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2026-28623
A missing permission check in the writeToParcel method of BleRssiRangingCapabilities.java allows for local information disclosure of the Bluetooth MAC address . This vulnerability affects the UWB (Ultra-Wideband) subcomponent and is present in Android 14, 15, and 16 . Exploitation requires no add...
CVE-2026-28612
CVE-2026-28612 identifies a logic error in the resolveActivity function of ActivityStarter.java within the Android Framework . This vulnerability enables Intent Redirection attacks, which can result in a local escalation of privilege without requiring additional execution privileges or user inter...
CVE-2026-28600
In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28572
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-73920
Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...
EUVD-2026-73919
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-85875
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...
CVE-2026-69806
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...
EUVD-2026-73917
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally...
EUVD-2026-73913
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-73911
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73910
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83980
CVE-2026-83980 is a heap-based buffer overflow in the Windows Biometric Service that allows a local, low-privilege attacker to escalate privileges without user interaction. The CVSS 3.1 score is 7.8 (HIGH) , with high impact on confidentiality, integrity, and availability. The vulnerability is ra...
EUVD-2026-73909
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...