CVE-2026-20543

A logic error in the Modem component results in a potential information disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). Expl...

CVE-2026-20528

In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation...

CVE-2026-20528

In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation...

CVE-2026-20528

A missing bounds check in ccci can lead to out-of-bounds write and read operations. This vulnerability may result in local information disclosure , memory corruption , crashes , or privilege escalation if an attacker has already obtained System privileges. User interaction is required for exploit...

PT-2026-104703

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761...

PT-2026-106162

In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106144

In multiple functions of rw t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58856: Improper Restriction of Operations within the Bounds of a Memory Buffer

In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28667: Improper Restriction of Operations within the Bounds of a Memory Buffer

In multiple functions of rwt5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20528: Out-of-bounds Write

In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation...

CVE-2012-5519

cups-root-file-read.sh ⭐ una implementación en bash del módulo 'cupsrootfileread.rb' de metasploit diseñada para pentesting y CTFs. principalmente un pequeño ejercicio de scripting en bash. pensado para ser un programa autocontenido que explota CVE-2012-5519 en sistemas linux; proporciona al...

Linux Distros Unpatched Vulnerability : CVE-2025-48622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ProcessArea of dngmiscopcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no...

ASB-A-508389908

In multiple functions of rwt5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-508717360

In ispdallowed of gemmsg.c, there is a possible missing authorization due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-102618

Name of the Vulnerable Software and Affected Versions wsl-pro-service versions prior to 0.1.19ubuntu3 Description A service component running as root within a WSL instance attaches the instance to Ubuntu Pro by executing the pro client and passing the Ubuntu Pro token as a command-line argument. ...

Linux Distros Unpatched Vulnerability : CVE-2026-97025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users o...

CVE-2026-97025

The Flatpak application is vulnerable to a local information disclosure flaw where it writes the OCI repository authentication token with world-readable permissions (0644 ) in the system-helper's cache directory. This allows other local users on a multi-user system to read the token and impersona...

GHSA-M8F5-RH7H-VGG3 microsandbox: Secret values exposed in world-readable process arguments

Summary When the SDK spawns a sandbox, the msb sandbox child process receives the full network configuration as an inline --network-config command-line argument, and any per-sandbox environment as repeated --env KEY=VALUE arguments. On Linux a process's arguments are world-readable via...

CVE-2026-77250

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access and refresh tokens under the user's .mcp-atlassian directory using process-default permissions. On systems with a...

CVE-2026-95667

The MISP installer scripts for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4 create a log file at /var/log/mispinstall.log and a named pipe FIFO at /var/log/mispinstall.log.pipe to capture all installer output. The log captures highly sensitive data including the generated admin password,...