Lucene search
+L

2126 matches found

EUVD
EUVD
added 2026/04/07 6:30 a.m.20 views

EUVD-2026-19568

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...

8.8CVSS6.1AI score0.00341EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/07 4:17 a.m.13 views

CVE-2026-20433

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...

8.8CVSS0.00341EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/07 4:17 a.m.15 views

CVE-2026-20432

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...

8CVSS0.00294EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/04/07 3:25 a.m.6 views

CVE-2026-20433

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...

6.1AI score0.00341EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/07 3:25 a.m.6 views

CVE-2026-20433

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...

6.1AI score0.00341EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/07 3:25 a.m.48 views

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

8.8CVSS6.1AI score0.00341EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/07 3:25 a.m.40 views

CVE-2026-20432

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...

0.00294EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/04/07 3:25 a.m.8 views

CVE-2026-20432

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...

6.1AI score0.00294EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/07 3:25 a.m.4 views

CVE-2026-20432

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...

6.1AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/07 12:00 a.m.18 views

MediaTek Chipsets 缓冲区错误漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain a buffer error vulnerability, which stems from the lack of boundary checks, leading to out-of-bound writes and potentially allowing for remote privilege escalation...

8CVSS6AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/07 12:00 a.m.19 views

MediaTek Chipsets 缓冲区错误漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain a buffer error vulnerability, which stems from the lack of boundary checks, leading to out-of-bound writes and potentially allowing for remote privilege escalation...

8.8CVSS6AI score0.00341EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/04/06 12:00 a.m.18 views

The vulnerability of the Azure Cloud Shell, a browser-based interactive environment, arises from insufficient validation of requests on the server side. This allows attackers to escalate their privileges.

The vulnerability of the Azure Cloud Shell, a browser-based interactive environment, is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

10CVSS5.7AI score0.0055EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/06 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2025-32318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution...

8.8CVSS6.3AI score0.00287EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/04/06 12:00 a.m.19 views

The vulnerability of PackageKit for macOS operating systems, which allows a hacker to increase their privileges

The vulnerability of PackageKit for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9CVSS5.7AI score0.00297EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/06 12:00 a.m.11 views

The vulnerability of the Microsoft Purview data management tool, related to insufficient validation of server-side requests, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Purview data management tool is related to insufficient testing of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

8.6CVSS5.8AI score0.00551EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/03 1:27 p.m.13 views

JLSEC-2026-45

A flaw was found in PostgreSQL involving the pgcancelbackend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would...

4.4CVSS6.7AI score0.02555EPSS
SaveExploits0References27
Redos
Redos
added 2026/04/03 12:00 a.m.16 views

ROS-20260403-73-0018

A vulnerability in the tlsdodecryption function net/tls/tlssw.c of the Linux kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an attacker acting remotely to increase his privileges...

9.8CVSS7AI score0.00328EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/04/01 12:00 a.m.14 views

The vulnerability of the /etc/shadow.sample file in D-Link DIR-1253 router microprogramming software allows a hacker to gain increased privileges.

The vulnerability of the /etc/shadow.sample file in D-Link DIR-1253 MESH router microprogramming software is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to elevate their privileges remotely...

10CVSS5.7AI score0.00633EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/26 3:14 p.m.12 views

CVE-2026-0113

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS6AI score0.00306EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:14 p.m.13 views

CVE-2026-0110

In MMDATAIND of cnNrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS6AI score0.00306EPSS
SaveExploits0References1
Rows per page
Query Builder