Lucene search
+L

4407 matches found

Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•40 views

PT-2026-92355

Name of the Vulnerable Software and Affected Versions Google Pixel versions 6 through 11, Pixel Tablet, and Pixel Fold affected versions prior to security patch level 2026-09-05 Description A high-severity zero-click issue exists in the Cellular Modem component of Google Pixel devices due to a...

8.8CVSS7.7AI score0.00591EPSS
SaveExploits0References125
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•24 views

PT-2026-92305

Name of the Vulnerable Software and Affected Versions IP Multimedia Subsystem affected versions not specified Description A logic error in the code allows for an authentication bypass. This issue enables remote escalation of privilege without requiring additional execution privileges or user...

9.8CVSS5.9AI score0.0046EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•25 views

PT-2026-92294

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the addr remap address map function within the remap.c file allows for a local escalation of privilege. An attacker can exploit this issue to ga...

6.7CVSS5.8AI score0.00103EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•21 views

PT-2026-92348

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow exists in the gf ta test set config function within the gf ta test.c file due to a logic error. This flaw allows for local escalation of privilege without...

8.4CVSS6.1AI score0.00106EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
•added 2026/09/15 12:00 a.m.•15 views

VulnCheck KEV: CVE-2026-58704

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges...

8.8CVSS7.9AI score0.00591EPSS
SaveIn wildExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•34 views

PT-2026-92293

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, granting System execution...

6.7CVSS5.8AI score0.00103EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•44 views

PT-2026-92286

In gsa sw pk hash compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00078EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-58704: Improper Authorization

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS8.1AI score0.00591EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•32 views

PT-2026-92319

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in multiple functions within fpc tee hal.c allows for a use-after-free condition. This occurs when a program continues to use a pointer after it ha...

8.4CVSS5.9AI score0.00106EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•9 views

CVE-2026-58766: Protection Mechanism Failure

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00101EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•8 views

CVE-2026-0187: Protection Mechanism Failure

In gsaswpkhashcompare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6AI score0.00078EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•7 views

CVE-2026-56973: Protection Mechanism Failure

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6AI score0.00103EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•11 views

CVE-2026-58755: Protection Mechanism Failure

In smmuinstallnestedste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6AI score0.00103EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-58765: Protection Mechanism Failure

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6AI score0.00103EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•4 views

CVE-2026-0189: Protection Mechanism Failure

In acinitpolicy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6AI score0.00081EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•8 views

CVE-2026-55302: Protection Mechanism Failure

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6AI score0.00103EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/13 8:16 p.m.•16 views

CVE-2026-29810

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

4.3CVSS0.00309EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/13 12:00 a.m.•14 views

CVE-2026-29811

CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...

7.7CVSS5.8AI score0.00336EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/13 12:00 a.m.•14 views

EUVD-2026-77075

CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...

7.7CVSS5.8AI score0.00336EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/09/12 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-89678

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix partial-write detection in nfsddirectwrite nfsddirectwrite walks a list of write segments and, after each vfsiocbiterwrite, tries to detect a short...

7.5CVSS5.9AI score0.0038EPSS
SaveExploits0References3
Rows per page
Query Builder