CVE-2026-47297

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-58822

CVE-2026-58822 affects Android , specifically multiple functions in ftsmooth.c , where improper casting introduces a memory safety issue that can lead to remote code execution without additional privileges or user interaction. The vulnerability is rated CVSS 9.8 (CRITICAL) with a vector of AV:N/A...

EUVD-2026-74023

In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74013

In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49921

This Android vulnerability (tracked as ASB-A-503554490 in the September 2026 Android Security Bulletin ) is a heap buffer overflow in multiple unspecified locations. It can lead to remote code execution with no additional privileges and no user interaction required, rated CVSS 9.8 (Critical) . Th...

CVE-2026-49919

CVE-2026-49919 is an integer overflow in the tt_face_colr_blend_layer function within ttcolr.c of the Android platform. The flaw can lead to remote code execution and local escalation of privilege with low privileges required and no user interaction needed. The CVSS 3.1 score is 7.8 (HIGH) with h...

EUVD-2026-74012

In ttfacecolrblendlayer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49919

In ttfacecolrblendlayer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49882

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74007

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49882

CVE-2026-49882 is a heap buffer overflow in the rw_mfc_handle_read_op function of rw_mfc.cc, affecting Android (tracked as ASB-A-503553866 in the 2026-09-01 Android Security Bulletin). The flaw can lead to remote code execution over the network with low privileges required and no user interaction...

EUVD-2026-74005

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49879

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49879

CVE-2026-49879 affects Android , specifically multiple functions in rw_t3t.cc , where an integer overflow leads to an out-of-bounds write, potentially enabling remote code execution with low privileges required and no user interaction. The CVSS 3.1 score is 8.8 (HIGH) . CISA's SSVC assessment ind...

CVE-2026-28662

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73991

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28662

CVE-2026-28662 is a heap buffer overflow in the p2p_process_prov_disc_bootstrap_req function of p2p_pd.c within the Android P2P (Wi-Fi Direct) stack . The out-of-bounds write can lead to remote code execution from an adjacent network with low privileges and no user interaction required. The vulne...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73967

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

CVE-2026-28618 is a heap buffer overflow (OOB write) in the dec_frm_prepare function of oapv.c , part of the Android Media Framework . It can lead to remote code execution with no additional privileges and no user interaction required. The vulnerability is rated CVSS 8.8 (High) and classified as ...