238 matches found
CVE-2026-58820
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...
CVE-2026-28660
In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-403565650
In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-21549
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21555
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21554
Technical details (affected product, version, root cause, and fix) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-21552
The CVE-2026-21552 entry describes a vulnerability in the modem component where improper input validation could allow a remote denial of service without extra privileges. The impact is rated high (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) with network access and no user interaction required...
EUVD-2026-52232
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
EUVD-2026-52231
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21549
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
EUVD-2026-52230
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
EUVD-2026-41496
In IMS, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2025-48643
In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0071
Summary: CVE-2026-0071 affects SettingsLib where a logic error may skip a permission check, enabling local escalation of privilege with no additional privileges or user interaction required. The vulnerability is described across NVD, ENISA EUVD, CVE records, and PT/security bulletins, all citing ...
CVE-2026-0097
In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-33803
In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0093
In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0093
Technical details for CVE-2026-0093 are not publicly available in the provided documents (no affected products, fixes, or exploit info). Monitor for updates from official sources.
CVE-2026-0056
In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...