Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a heap buffer overflow in NrmmDecoder::DecodeSORTransparentContext in cnNrmmDecoder.cpp, which could lead to remote elevation of privilege...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, which allows attackers to escalate their privileges.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website’s structure. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the DDNS service of the microprogramming software platform for routing and switching RUGGEDCOM ROX II allows attackers to enhance their privileges.

The vulnerability of the DDNS service provided by the microprogramming software for the routing and switching platform RUGGEDCOM ROX II is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their...

The vulnerability of the microprogramming software in the RUGGEDCOM ROX II routing and switching platform, related to the lack of measures taken to clean data at the management level, allows attackers to increase their privileges.

The vulnerability of the microprogramming software in the RUGGEDCOM ROX II routing and switching platform is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the ColdFusion software platform, related to insufficient protection of registration data, allows attackers to increase their privileges.

The vulnerability of the ColdFusion software platform is related to insufficient protection for registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2025-50705

In NrmmDecoder::DecodeSORTransparentContext of cn NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-48626

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

KLA90812 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote cod...

The vulnerability of the Nagios Log Server monitoring and analysis software lies in its authentication mechanism’s deficiencies, which allows attackers to escalate their privileges.

The vulnerability of the Nagios Log Server monitoring and analysis software is related to deficiencies in its authentication mechanism. Exploiting this vulnerability allows a malicious actor to gain increased privileges from a remote location...

CVE-2025-48626

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48626

CVE-2025-48626 pertains to Google Android where a precondition check failure can allow launching an application from the background, enabling remote escalation of privilege without user interaction. Documented across multiple feeds (NVD, Red Hat advisory, CNVD, EUVD, OSV, CVE list, and regional b...

CVE-2025-48626

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the Longwatch video surveillance and monitoring system lies in improper code generation. This allows intruders to enhance their privileges and execute arbitrary codes.

The vulnerability of the Longwatch video surveillance and monitoring system is related to incorrect code generation. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary code by sending specially crafted GET requests...

The vulnerability of the __blk_mq_update_nrHW_queues() function in the block/blk-mq-sysfs.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to increase their privileges.

The vulnerability of the blkmqupdatenrhwqueues function in the block/blk-mq-sysfs.c module, which supports the block-level kernel in the Linux operating system, is related to the lack of checking the returned value. Exploiting this vulnerability could allow a remote attacker to gain elevated...

The vulnerability of Intel Xeon microprogramming software lies in the insufficient detail of access control, which allows attackers to exploit their privileges.

The vulnerability of Intel Xeon processor microprogramming software is related to insufficient access control details. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Linux Distros Unpatched Vulnerability : CVE-2025-13631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a...

ROS-20251203-03

A vulnerability in the JMX interface of the Apache Cassandra distributed database management system is related to a flaw in the deserialization mechanism. flaws in the deserialization mechanism. Exploitation of the vulnerability could allow an attacker to implement a man-in-the-middle...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...